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", 0x1000}, {&(0x7f00000009c0)="b1873d234ff21e92d1c84cf3e3738fb29766577919a5a23e5bbfabc1d75dea61a41a22fa25df2775a37d757576f1b0693ddd66b56d0f4faa491fc662f77fb68f6b361f07d000e064b3bc70f072bfb0a21c023eb3a25ca49b0df2326cdb74438439e6c34a630e53051e13f97308e4507c52830a2c398642eb2b938b531e37f96067b1fa2c83a8408e88bb04bc779835f33b0bc844d76f660198c6452e095a25f3758d9d7a6df3b57f957e5b6d221ea33154", 0xb1}, {&(0x7f0000000a80)="f74e77c2c4db0d5986d2857c9ed02d079b702153e1d446b63abec1a759987df3028dd7f60d7b20a786ec5f019a35e8b91e58148ea3511c23aee775ad47ca2054e2ffed5ebe8a3cbd2951b12107ebd0899f1f48d2a64702e6c8b1e64f58ee75221d4ecfed20529b0b409b49094c2895ca14f6499d3c1b22761568f42e4921824c54021cd62dd4b5216d1cbcc7e404017525acc4c961a63bb37d6758c20580b047384e282f18fe8dda4be7f7efdd958975f9286d9a7a8b05f1db7fd614b54fa7a406515f6da8706243641c6c", 0xcb}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="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", 0xfd}], 0x5, 0x0, 0x0, 0x4004880}, {0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003040)="fe4aa8678b12e0862b358b5cdff9eb6f3d028eea76a1f7f194d496512a77c07ceac7b5f245ff502ebb3fb9a20f00fa41acb07016eb3bba73cd2a2a2fd8bb6c1554f99178e2417c809ff406d1", 0x4c}], 0x1, &(0x7f0000003100)=[@iv={0x1018, 0x117, 0x2, 0x1000, "932e93cb6b355054433051a1a5ed5b82b2c2c86466d2cb6a19bb0adc382b9b12e192092b310c00a4e593db8fe152eed11d57cff7ae9052eba03301f95908410dc671880d422caeb3dadcc530f662fa573a48381ac523b503377706a1a965cb982a31c7ba4baafa1df13f13af49f3880bb907f60e507d4ac048a5b7ee1ce9d093a8b9c31747bc1271f9bf65c24e0844004c9371310c98e4e6b6ea0023996439a3e47c9c624543f42b9bb1249dcfa004f4d7a03f53f5f0dc6aaeec41ba0b481560f1e31a087a384931b63ca31747139f55001bc4c288eee071691fc623a02e176452bae3207e2643708f614716515aae5421d35950582682320a1aa4d50f6d9ef522add8b3de46d5dccc2ebb57152116b80fc265d4bd23c863ca189329f05fb11b5ad69db39b6da5ab2fb7a7f782cb88b88b14672d7b08b22650667aaef8b051db60419c56373ce52987595e04a95be06be41b45876a5c6316c0a5134b89e04e77f19554e5f2bab0d392a5bc7cbc27c80234334430899b3ef32d89d2eedb5636d2822be301e59c4c51b9a58d9edd48dbfa667c3c2e1ea0ff71432728efc699c76c91e06c35e6749a7333383c52618d3e4e47f1dfd2af1b6a13ea68fb2ac81ccfcf2cbc9e0b7dae4db199fde9e2b7f8a9cb3d4079f1cb934393735b3cdd6e270e96bbf18c139d227c36a778c2e1bf07f7708b9f9732e660a17348d92ecb44185d987307ac8e65ded06dfe9f7928210eb8465cadc0b83a097b6038ac28a6c65224a5a386635dc651f75fb4f48f53a6da27670d9fd5eee256ad5f4d3eb7a2382e7cf8cf765022a14932dc552921e6c44daae353438318d7d730ebfa4f963149e8e5739978e7b1bdbbb0a6461247b839e5630139b9fabbb7be24ca8f9d82f4a7583aaa943d5e763c8a4023870818b441ca27532a512292923888ed85ba9fe6a61e56a26cee8a7f5acc53d94e09571e51c1f101b4c9fa31589c78d1ea39d9e5b82c2569800eab2b7caa395c53fd18451e512889d723cbef89c76e955750eb06cc878c52850157c0adde053d53d91d8be6b2285b2a2c2398ab81093320a79c5b45f9abdcec2702dd75db8b3d246c77fd6c480d3439b35ba27e41497e5a40598470376fa92a77b63af1843b319cdcc46fba65a824c06748ec4ba7c2617e7b182f81bd3f7a21f1c0541526c63cc1955509fde7839dcc29c6a949237b3df7f9fe31546342cc902cf7615eacb3fd1ab6a6ab5360a1f536ff4da4d4851f7bbed93c3718ea00bed7d76d95295d695381369404bf3011c5befc6bda7feeb0918a01b7116492a58895c6a85ace77610f46e3bf4941868a3bbdb176f4dbbde2147f6154e1ffa038e29709aeedeb096f0a77a7b6960d802e5a9cc53f35c7ba9e66e526ebf49b5423aab4bb24b18cd619283be5efc94ea882f2cfc12f7661ad5048647bc9e324ad1eb93b9662090d45f53c6c5cfafde98447f2cdccf9b1f9e0ef75a620973f1a3b183af1d8bfd850ccf3e27b4323117c1a03ade9a36881cd3518ae8cd9b93296c9fc63154c7be50fc8dd6ada415cd837792eca1ab923a7b5b6990f15ef6099225a7ff7a578b72c8719917adc702120400da99f7a50e5316bda0deca9425d6dfd7705447b9a5c13f5cbe4d3704e2de21140510d5eadc54fecd6bcb79239d9cd333b28e03c0f1e0c23b2cb06baace87c5e0f75f9cc18de8031ff635c5fdc15093127fa24b3a46333b08c632926c61a8ec663a1719c91c466ab10d3ffa8f99b5def482ac397fb3b7bc007de256ffeda2dbec3a84dfcd74eb7e914c39ee3dacb95e7a44aefe059418942b5879e51bc9a1ba516afd38335c7baa58517e0764542b22a0fedc70179f8765c333c4373be65b59042c4f05dbdc748a0be624b33674aef99096d88ae4164165fd2726b88a9659fe5bf24269039e5266718fbfe12769ca2d1e2551bf21c97998340f3bd7c8cedcce2308fb9aa001a366ed197ebba36f49257afb6d316318ad7b6a60ca9c86db118d3a59bc5acc386a8bbb82d634f897daea051ba73ff1e02da75b2137d4de743d6b4b7d9f50902b8672f9fefc200b9dd3cdfa1db0526c37a3d2ce4fd7e1306886869d31c3024004837b9cf07220262fd3379c62179480927eec3156454353cfe5b8d000de9bf03d6bb6a70996926270f3fbf644c3d14a4311d2f4a240a82a3230d1c72e007a0574e1c4625c90600a69e99bbddf847dc3123b3c315908e872cdc503259698a8c41aec031fa9a21695fb20109b4ed78ab826e531eb9e79e30223098971cfb3c49ddb7c5c3b01bd7e6518d894d04785fbdf242f26b5c54685a0c74862619d523e8ecce917973b699dd13cc0808fa6a819169d96b0262b3122fde4771ad5a5da0777fb2580cce55988382a048e1cf09b11228a99571982207a5ab61b428cf1bd42d23c6b7900ec2296dae81663034af7f6dc02f4081c019cc3321d91e4a894056560cf4e5183ad1a6c1707385e06f1897ca81143e039ea3787030450f73cad47f260e5813c480cdf78e0f0a3297b6e04af8de0ff96d367753160ea36e4e345e1856f225621c92a783e797ac5534169693ac038afea9aa4ef0cc1b3564fd5c4f95d9a198cfc497143888228acb985d1c0186c8bd6fc8101f0920438c71c4b102e950f9395768e258cb79fbb7183de20bdc958b67fa7a4a4e6c93806c32a0fcd7fc9584ace878833ccaae9dbe9e9513e0d79de1622ac4b5b6295842c85c4bcdeac73e58b27a2a65ade67979cde17a1ae20be2db95122a7f39dd42e822850705f699eaf84e10ad6c97347e424e32977eea0ef0c5bc49f784cc3eb65a7b6396c0ed597f88f79d1118acd40227b431cd015d5787e1e3ab8c24e499147389462b7c35c55b5129cff63002f201eddfe5602e3ed49e28e8cec6d8fe1bded1e5bfea70abea4cb1463f995cf8770df44b820f2a3a85dbd03052471911ba896fff16295147ba93f53b43ceb1cc5152c94eae2b1ed5979f008f5ce429ec4a75877e18cca646dc045c8328df617946312f834bd610ee168e811668a28cecda6e9c09d38a1de9ac34e4a8ad1f44514f13311a27109943b42db83870fd0911c3f68aedf0f8fe9d6d194ca193245ed720890a44d2103846964aadacd1341103dd09a91265fd76572ce999a159c24556202ed0726f898065b38b2debba6c01d5f240f2c8744c6ca1d2fabf5636bdae1da9528262835d00417fc359f3faffc52bdbb24a99618b2aa1d4d63a39f079e1bc671bb4bb6a16342e48ed04e69a681838a79e63a207b47c036bf765e079dd88026bc9603716f499ef19ab7cf1c700b3282b98e612950b4f809091d0b5488c18c0d22bfdf5e08641e8113ba7333fe171293d8298d9c278009efca6f81454ddb2207a5980b916ceadf03fba1356f15e56b59054d49dd18035294408b3e433fb4a0fd3711bf23eea21b096b0bee251586e341d6a489617845f2e1c55c688fd0712419ae68056864e15ff2336d6bb69a44468f763157c088313219690830515b38cdc7cd9c1c14f470853edb750931ca411b2eaa09b02126c617cfb383815633da8cc838ffe915e882c443eb35de91aec74d876ec1bdfad5148c880d876d31d5facaca455802b147c6e3683b06b4c646fb3beff4f3d3ac3700cce19403b149407ff4db6e9ec9639859f8bf431b4afd7fda9c7b8c644c3ced6e2f36fa2a21903e0ac882b534d18df9668a60872747b416c70b2d545b444205cbb0743626576296fe3632b2b617d3af1b7d43d258ec6da2ddbcdff4c3f3fa3867a973df10053ef4e57cdc2849f56adfbbbba041539052b4d0c05994271321c8f31db448ceb01b00225c087e7b9f6c2365af7cd1de5226d26f35cb7216598222c95f10380bafe9aca1e8a9927e66153197229b017a6eca8a1a0674b19e2944c6d31b487d160feb360f561c61cbbc312abb015aab471a9136c4f6cc20d7def895c269a5d8a55f10e79c394618130edf0e597df122d8447082f6389b54e67e5298bd39b1f1d51c50fa9c6d4edcfc2adc343d6c05a462bf68096dcf18da9b261e2a6277285b387ea6c861b521a3b29c721ce1861b6c9969d18c80b883b75edaea40a383d7c42ab64f52329d8ce89001f5a558a03f4474900de42a88b018ece6832b6f523cca30508a3632f47965f8456343d769443b9e3c853a2778366a9963562fc7c4b4bd4ca8192440edf30973851b85e784217ecc02ae3222c62421fc07c6fc3d4569dc53139ff1f476eb637da7b67cf1cd5ac17d6ab5cf17faede6ec4b8e28843b73264fcdae8f2b173d8660c217e6d1ec76546b3b156229512cb0fb2d24871dacd6a703c6eb125aee9524364033e9f5c4ad03345be9552e2bbf777fd397103072e6f963299fb950cdf637610b72c31dfc05370b16e69215cb07589d1d41924c0d1f8925c8f3329625f808c3a10e90eeb6626e39ca2d6e05e913f351ad619699698392c9db4fcc574b0debba1012b1241bcede88f0fd4a9e228280cc3c48f6724a343305cde08de8f5e75ed2407eed141e9548052dd064c2be70eda22522d1630e637e6d2e6a8002ba2d7b4c176cccba384bec0500cee03f6e324e5db59ad7365bba57d63ea9ac785578ea39dfa6d2798127c2c8c0c66dbed46baf6777e02e26759c6ac6ac6f9b3bf42327ec472b39d4347cc6b6a2727f4f74ab64a9828b0b0496254504864b47ce21cf985057508a269a7ea5092a995a481650ab7dc872fd39060ca8a32e088b3dc7ce2ded95153e32cb8461682db3b9bfc57f9460b5d245de66691b36e64ce5e8222cc304ce480c93a6a86693c6ffc8295256dfd7cc46d10a948f07bd4ab1c9a74bf126f230bbcb048a9c5be74a5e35f4f29ff45a1ca8dfeae60d93fad9fb99a7dd0f7eab9870866277eea6f26dc74e4cf1d07274f06ae1543c79cdb6bbf63219f452337a243214577e7b0cd83ebaeb4896618c4636581040820c76924452f17dbc56d250436ae38765903ef7e422c425287e65c0cd0b1624a64b581343070962284a53f4cabbb7877aa13a974be69703726ebc8b4276e2fe98e1c97edfc6c36d428e1ee9b518628f3614e147b2b86e0de253cba017538ddf9066d1c8992c9dc13389de53244564ca83c77a1368fd20861bbeaa797bbda969b5f1c42f06bcdec0ed4be05678aca42254bad4565c58664714e317f0294565a96a5dbc2d8ed94ab6ce869d101ba63c95a7a7c36396afdfe556c3710a9950ec4dfb83ff8586f3aef3fb2a00ffccefc6cbf01d18aad17c0154bf259c9bfd2acc8381f1146fe5a06d6444faa42383815997b69aa397e42a0c1b3de7b3d0dbbadb7deb0134d817fb022646722b9c68e78c2c0f6095679f9ee113f03d130e9949dd3dbba895fcd8620bca1c7750a64fba1f34c9ee5075e3a7c9b7e305fc89279c2ec5fae90e58f1dbf94120edaad3f80f212b4a74e6da3dbff6319f80dbd4749c4ebe499dfb1fe16f20c386dc8d9b56f9cd1ef7532fa29f06db622ce2e15643427bea66ee9e2672f43914a943aaf194a581ddd67ca866a1860c537c41f572d183a14a5799cf5aa194169806ad337f50b37bf0281f56e6c6d921610779f4558308ef4292504ae17c21dda7a384b1061fc793b7c25cec2d3930a364738f8ab6d212be3d350b43fef7c7543381822a6ae3f9ce633be894db5fbdd9bfcb24d2606a648bfe26ce57fe49adc1581c64e9f48ca6cf661a46f88f365dfff4c63adc384538d26239a35b7f632946ce237ee8ab8f2fac451c629b03c426aefd9a8efc4111310e5bbe97a50c6c15c1ce1a167020cb3bf39d3107c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8f}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf0, 0x117, 0x2, 0xda, "28861e11f3f6813b44e8885df32a5844931ec9d5a966d2e735a5f6672a9986903bc80d7bc120ad9e69b9185ea1d09f7ab8365cefd6887a41acfafeb783d64e34ed19b3baa8b4412d76f48e182130fa208ebd25d5ad2de931c6709d7e003549a54eae5dd28aaf7d3631a1c73b3de9ca7f9664e0e3cb3c92149a9967bf2ea180190b053e60353864512e8096190476e0e6916a97253b049a338b0e80613a49a6498365844fe16a70a3395ea31ee9e2993282b9d6f734578e4baea19cc7f72e551fb2ec73aa9181bf4c27f425e3ceb748e05e3b01ad5d64ba32e462"}], 0x1150, 0x40010}], 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/388], 0x184}, 0x1, 0x0, 0x0, 0x884d0}, 0x10) r11 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000024000704ffffffe8e400000000000000", @ANYRES32=r12, @ANYBLOB="00000300ffffffdf00000000080001007069650004000200"], 0x3}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f2, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5500000064000bff0000f00000b87a0000000000", @ANYRES32=r13, @ANYRES64=r13], 0x74}}, 0x10000) sendmmsg$alg(r0, &(0x7f0000000180), 0x52136a5252f3b2, 0x0) 03:40:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 03:40:02 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@delsa={0x28, 0x11, 0x0, 0x0, 0x0, {@in6=@mcast1}}, 0x28}}, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 03:40:02 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) flistxattr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 03:40:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x5421, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b']) [ 835.103686][ T4287] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.112135][ T4287] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) munlockall() getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)) [ 835.268653][ T4279] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 835.281315][ T4300] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.303395][ T4300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.325181][ T4306] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.355595][ T4306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:02 executing program 1: r0 = epoll_create1(0x0) flock(r0, 0x6) [ 835.410659][ T4320] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.429392][ T4320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.500412][ T4323] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.518794][ T4323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.560677][ T4287] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.577022][ T4287] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.703360][ T4326] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.719147][ T4326] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.746749][ T4333] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 835.808289][ T4287] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.832517][ T4287] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 835.847380][ T4323] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 835.861342][ T4306] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 839.912358][ C0] net_ratelimit: 32 callbacks suppressed [ 839.918031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 839.923763][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 839.929487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 839.935226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 839.992462][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 839.998278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 840.152388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 840.158196][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 840.312367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 840.318179][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:12 executing program 1: 03:40:12 executing program 4: 03:40:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) write$P9_RREADDIR(r3, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(r6, 0x801c7011, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xffc0}}, 0x0) fcntl$dupfd(r3, 0x406, r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR64, @ANYRES16=r9, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYRES64=r8, @ANYRESDEC=r11, @ANYRESOCT=r12, @ANYRES16, @ANYPTR], @ANYBLOB="8ae544748debc86d7d9578ba2823b27ba37365b2f191bf15609db208d9283868715dbdad197c2286ced6e2ee9194597d5c87ee656798c2684b03e1f160e999155a6c17bacdbd3425663465a37dced2182a5242db5e6ef0e3daf5246af2cee76a1b56443aeb5feeff81065cd49e0c6e29625223cde90e8e329390cf2753fb2752088865f969ddaef9b7e43dcb2dbd055824c26ce01e50cc6e1267dc4bc3dbbcdd396a501e719cf2e7296c7410081076d15adda2e30d6e851d3ccf4fcc965720c666fa3b678aab8da8e23f550df231b1dd08ac6eea1cdf47879a9ad44e8925dd4115faf169e8c7980dfda5ceacbe92c0cb5fccd705", @ANYBLOB, @ANYRES64, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES64=r13, @ANYPTR64, @ANYRES16=r14, @ANYPTR64, @ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r15, @ANYRES32]], @ANYRES16=r9, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x845}, 0x20000004) 03:40:12 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) flistxattr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 03:40:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) munlockall() getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)) 03:40:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) flistxattr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 03:40:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) write$P9_RREADDIR(r3, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(r6, 0x801c7011, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xffc0}}, 0x0) fcntl$dupfd(r3, 0x406, r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR64, @ANYRES16=r9, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYRES64=r8, @ANYRESDEC=r11, @ANYRESOCT=r12, @ANYRES16, @ANYPTR], @ANYBLOB="8ae544748debc86d7d9578ba2823b27ba37365b2f191bf15609db208d9283868715dbdad197c2286ced6e2ee9194597d5c87ee656798c2684b03e1f160e999155a6c17bacdbd3425663465a37dced2182a5242db5e6ef0e3daf5246af2cee76a1b56443aeb5feeff81065cd49e0c6e29625223cde90e8e329390cf2753fb2752088865f969ddaef9b7e43dcb2dbd055824c26ce01e50cc6e1267dc4bc3dbbcdd396a501e719cf2e7296c7410081076d15adda2e30d6e851d3ccf4fcc965720c666fa3b678aab8da8e23f550df231b1dd08ac6eea1cdf47879a9ad44e8925dd4115faf169e8c7980dfda5ceacbe92c0cb5fccd705", @ANYBLOB, @ANYRES64, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES64=r13, @ANYPTR64, @ANYRES16=r14, @ANYPTR64, @ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r15, @ANYRES32]], @ANYRES16=r9, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x845}, 0x20000004) [ 845.399605][ T4356] validate_nla: 1 callbacks suppressed [ 845.399619][ T4356] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 845.421235][ T4356] __nla_validate_parse: 3 callbacks suppressed [ 845.421246][ T4356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.544637][ T4359] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 845.561051][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.607382][ T4350] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 845.621655][ T4350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.689052][ T4363] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 845.697789][ T4363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.733985][ T4364] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 845.747063][ T4364] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.782219][ T4356] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 845.802521][ T4356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.832768][ T4365] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 845.849721][ T4365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:13 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) flistxattr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) [ 845.892146][ T4358] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 845.908771][ T4358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.934462][ T4366] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 845.955100][ T4366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.993953][ T4359] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 846.054506][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:13 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) write$P9_RREADDIR(r3, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(r6, 0x801c7011, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ffffff7f1c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5d14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4aca1182de67f1e371fdbb156f4e7517c7f3e84fc37d7b272a07770aebb14aca1ef1adc0065891ee00dfa98f23e202bb0e0c56a98a4911fec0c7c0b959963612a1e0a04002fd7f5e2fdbfff58f3f0be8687f60d7b130e6e301488961a3b81fa65bbeceb8d28cd76c371684ee269a22bdcc873b6cd5616f9dd9f5765b0f76fc72b97530ee08f8e0b769e39634b96444e745ad3f516aaf6"], 0xffc0}}, 0x0) fcntl$dupfd(r3, 0x406, r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR64, @ANYRES16=r9, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYRES64=r8, @ANYRESDEC=r11, @ANYRESOCT=r12, @ANYRES16, @ANYPTR], @ANYBLOB="8ae544748debc86d7d9578ba2823b27ba37365b2f191bf15609db208d9283868715dbdad197c2286ced6e2ee9194597d5c87ee656798c2684b03e1f160e999155a6c17bacdbd3425663465a37dced2182a5242db5e6ef0e3daf5246af2cee76a1b56443aeb5feeff81065cd49e0c6e29625223cde90e8e329390cf2753fb2752088865f969ddaef9b7e43dcb2dbd055824c26ce01e50cc6e1267dc4bc3dbbcdd396a501e719cf2e7296c7410081076d15adda2e30d6e851d3ccf4fcc965720c666fa3b678aab8da8e23f550df231b1dd08ac6eea1cdf47879a9ad44e8925dd4115faf169e8c7980dfda5ceacbe92c0cb5fccd705", @ANYBLOB, @ANYRES64, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES64=r13, @ANYPTR64, @ANYRES16=r14, @ANYPTR64, @ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r15, @ANYRES32]], @ANYRES16=r9, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x845}, 0x20000004) [ 846.152611][ C0] net_ratelimit: 32 callbacks suppressed [ 846.152636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.164412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 846.170488][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.176465][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 846.232399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.238223][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) write$P9_RREADDIR(r3, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_PLL_GET(r6, 0x801c7011, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xffc0}}, 0x0) fcntl$dupfd(r3, 0x406, r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="8000120008000100677265007400020008000700e000000108000600e000000108000600000100000700e0000001080007000000000008000700ff0100ff0400120008000e00000000000800110000000000080017000000000037000100", @ANYRES32=0x0, @ANYBLOB="04001200080007007f00000108000700000000000800060000000000f1e7e913f90d2fc50c9d5afd1ab0bfa689961ba92bd5b0ea90fd7d7483bdfb8ac8d0b0a03237fb5bba4ea75dd24893ee570f111c90d2ecd892b2157aa5b188df98ab50b55b160f2a556375a4885f1adcea75794a2f36bd735a686a730d1841418d9f54736e474361d9abc62831ccdd7212b22c737a1e08b5c14cfd1ca43f673fd062af1e68378950e84e6507386a418d0edcd4ac"], 0xffc0}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR64, @ANYRES16=r9, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYRES64=r8, @ANYRESDEC=r11, @ANYRESOCT=r12, @ANYRES16, @ANYPTR], @ANYBLOB="8ae544748debc86d7d9578ba2823b27ba37365b2f191bf15609db208d9283868715dbdad197c2286ced6e2ee9194597d5c87ee656798c2684b03e1f160e999155a6c17bacdbd3425663465a37dced2182a5242db5e6ef0e3daf5246af2cee76a1b56443aeb5feeff81065cd49e0c6e29625223cde90e8e329390cf2753fb2752088865f969ddaef9b7e43dcb2dbd055824c26ce01e50cc6e1267dc4bc3dbbcdd396a501e719cf2e7296c7410081076d15adda2e30d6e851d3ccf4fcc965720c666fa3b678aab8da8e23f550df231b1dd08ac6eea1cdf47879a9ad44e8925dd4115faf169e8c7980dfda5ceacbe92c0cb5fccd705", @ANYBLOB, @ANYRES64, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRES64=r13, @ANYPTR64, @ANYRES16=r14, @ANYPTR64, @ANYPTR, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r15, @ANYRES32]], @ANYRES16=r9, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x845}, 0x20000004) [ 846.392378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.398214][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:13 executing program 1: 03:40:13 executing program 3: 03:40:13 executing program 1: [ 846.552344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 846.558187][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:13 executing program 3: 03:40:13 executing program 3: 03:40:13 executing program 3: 03:40:14 executing program 1: [ 852.392375][ C0] net_ratelimit: 32 callbacks suppressed [ 852.398035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.403765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 852.409506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.415249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 852.472377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.478181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 852.632366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.638236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 852.792375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.798181][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:23 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:23 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:40:23 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xfffffd1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x8, 0x4}]}}}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xe0, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x9}, 0x18) 03:40:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) 03:40:23 executing program 4: 03:40:23 executing program 0: 03:40:23 executing program 4: 03:40:23 executing program 0: 03:40:23 executing program 4: 03:40:23 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xfffffd1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x8, 0x4}]}}}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xe0, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x9}, 0x18) 03:40:23 executing program 0: 03:40:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) 03:40:24 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:24 executing program 4: 03:40:24 executing program 0: 03:40:24 executing program 1: 03:40:24 executing program 2: 03:40:24 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:40:24 executing program 2: 03:40:24 executing program 1: 03:40:24 executing program 4: 03:40:24 executing program 0: 03:40:24 executing program 1: 03:40:24 executing program 0: 03:40:24 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:24 executing program 2: 03:40:24 executing program 4: 03:40:24 executing program 0: 03:40:24 executing program 1: 03:40:24 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:40:25 executing program 4: 03:40:25 executing program 1: 03:40:25 executing program 0: 03:40:25 executing program 2: 03:40:25 executing program 4: 03:40:25 executing program 1: 03:40:25 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:25 executing program 2: 03:40:25 executing program 0: 03:40:25 executing program 1: 03:40:25 executing program 4: 03:40:25 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) [ 858.632347][ C0] net_ratelimit: 32 callbacks suppressed [ 858.632355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.644397][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 858.650183][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.655972][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 858.712340][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.718174][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:26 executing program 0: 03:40:26 executing program 4: 03:40:26 executing program 1: 03:40:26 executing program 2: 03:40:26 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) [ 858.872333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.878192][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:26 executing program 0: 03:40:26 executing program 4: 03:40:26 executing program 1: 03:40:26 executing program 2: [ 859.042370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 859.048411][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:26 executing program 4: 03:40:26 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:26 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) gettid() 03:40:26 executing program 0: 03:40:26 executing program 2: 03:40:26 executing program 1: 03:40:26 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:26 executing program 4: 03:40:26 executing program 0: 03:40:26 executing program 2: 03:40:26 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:26 executing program 1: 03:40:26 executing program 4: 03:40:27 executing program 0: 03:40:27 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) gettid() 03:40:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:27 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c0546ab11954995d8c08000100010423dcffdf00", 0x1f) 03:40:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_dump={0x1f}}) 03:40:27 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) 03:40:27 executing program 0: semop(0x0, &(0x7f0000000240)=[{0x0, 0x6, 0x1000}, {0x0, 0x41}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x68}, {0x0, 0xfffffffffffffffc}], 0x6) semop(0x0, &(0x7f0000000240), 0x6) [ 860.521447][ T4504] __nla_validate_parse: 18 callbacks suppressed [ 860.521459][ T4504] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:27 executing program 4: semget(0x1, 0xc116b60ad0dd4751, 0x0) 03:40:27 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid'}}]}}) 03:40:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000180)=0x350) 03:40:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="b8a0", 0x2, r0) 03:40:28 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) gettid() 03:40:28 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xec60175b2779f65b, 0x0, 0x0, 0x0, 0x0, 0xc9, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x490}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 03:40:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) 03:40:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1) 03:40:28 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x8}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="4105f52d2daf42164d0670609ff77a2b7ac27c0315d98db454112f889c5e19", @ANYRES32=0x0], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 03:40:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa001, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d8214) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 03:40:28 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:28 executing program 1: semop(0x0, &(0x7f0000000240)=[{0x0, 0x6, 0x1000}, {0x0, 0x41}], 0x2) 03:40:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) dup3(r2, r0, 0x0) 03:40:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 03:40:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 861.980745][ T4561] kvm: emulating exchange as write 03:40:29 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) tkill(0x0, 0x16) 03:40:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 03:40:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:29 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x8}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="4105f52d2daf42164d0670609ff77a2b7ac27c0315d98db454112f889c5e19", @ANYRES32=0x0], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 03:40:29 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r3) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = creat(0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x4002) io_setup(0x0, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = getpid() sched_setattr(r8, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r10 = getegid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r12 = getuid() r13 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r13, 0x0, r14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000740)="37a1b139d573e87b0bfe6d7ac266ed4c4ff01ba5607e4db6db51140d67764e75cfe7bb0d11f2bdacfcf52b868fbc43517a38172315de3136692cacc719c636d23d48e0ba2f38f0040b907a957d728024d492b1dbaffae1335786c0a99a380d55f3aed7ae1788da38d213d6f4a46483339b8661418e", 0x75}, {&(0x7f0000000480)="5a674782cb3751b5ba12365338b63a906f", 0x11}, {&(0x7f0000000800)="6dbfc8fc57ad41369c3841c965254930b5a8293f9d36793445092c2e3a665ee277f8a90932e91b70dbd67afb3bbd750ce422a03ee5320c1a21515eae6f550f059ef5fb78332b206efd8aab814bfc95e49d0cb1e74b69a3a7998a7e103e768545765d39c68a5468f052c06d596cfe9bb3c38e9c914cb0f3bf7ad58bb956087badee03e513cb4daefd36db9f356ebd3485cdffda20ae71032fd455400dd15c73ee60aeddae0a2134860e09569b3681da54e3e43f0646e068e7cc57a63fc8fd016f5f333b", 0xc3}, {&(0x7f0000000900)="54759a7ccb39a196eacd36033fa5b0a256c2bcc4abce592a7151ae8e125bd05538fec3a28e5bd4cf803c796c8bf01289bb6679bd764e367befdfa8b948150539db8b402bbcbad10631dc58c91e6869b487c54bfd6247f11d224b81dbd334e100c2c7057bc3b7671cbb90937453d0bef4deb83008acf0756c20417c511834891025fd6cd73721a52d0db75008f44c01d6de0769492b03ee27ef9fb060", 0x9c}, {&(0x7f00000009c0)}, {0x0}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200f8bd7b90d4c33563a1d622000006d06e2ca1631d0f7f526e49ecb5af44145734d511554dc2a1db780a1bc16b398ab6991dc75d665cbcf157b3dcd825b2d908bb75bff3f5ddeb1af5afef46eef5558bf881e7b4b211591231c1e820ef790f0b6d121030e5c40cedea5e4548b84727d97a1490ebbbaa2b7c4cb61cc00293cf87c7d89952490d11c7c724f0a1c0cbc30dd9e8f34b037273ed0f7f68d83871c0a3758b73040288d1e486a057641852e2e54cb573ee1d361388b9068e17484eba95337d334417", @ANYRES32=r8, @ANYRES32, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x132}, 0x12) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuse\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d4f303030303030303030303030303030303132303030302c757365725f69643d3df251f331e9fe648329800738edbd7565bb1c5f7adb2c7f62bb27bc58f25fdfcef816b0c9d781bf62426e4d17534f1e41485a25eb8d16569afd49d4b9a30c4d3dcec0be2e3dd342936827183df54f745aafe3f0eaf3599096a0e790d11c254aafb91115348f14bc0e8750f2648dd811593e748983a03f6f2125c91becdd79f8365a5373e32ceead15e1dc318d15951c32083442b101bb0bd577684d824c645fbbbb77604d1f00fdbf59208c9edda22c9dc951be0a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,appraise,\x00']) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x0, 0x8, 0x357}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x0, 0x81}], 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(0xffffffffffffffff, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x654) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r16, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15}) 03:40:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 03:40:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 862.759610][ T4585] fuse: Bad value for 'rootmode' 03:40:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/kcm\x00\b\x00\'\xde7znT\r\x1cc\x14=\xd5=_w_\xc8\xa8\x97i\xc8\"\x92\x89{\x90e\x97\x88\xd3\xe4\xf7y\'\x1b\xa7(\x87\x92X\xabK4\xca\xac\xe0P\x99\xa5\xcfB\x88\x03\x14\xae\xa2\xbfG\xe4\x12\xcd\xfe\rIG\xe3Vm\xed\xa2\xb5\x1a\xa4\x18)[[i\xa1\x0eq\xe2\xfe\xf2\xe5\xac\x88\x04\xba`\xac>z\x92S\x89E^Wv\x1brJx\xe9\xa8\x06t\x13%\"N]~\x00IA\x18\xa4\x86\xb6\xad2\x81J8O\xb4)\x89\x14\xd4\x8d\xf7\x85\xeb\x00\x00\x00\x00\x00\x00\x00\x02\xf3\ap|!\x97\x18R\xfc\r\x00\x00\x19\x00\x00\x00\xf9\xb0?s\x8cg\xdf\xc2X8\xfc\x7f\xff\xa5\x86\xf7\xe4d\xe3J\x88s\xf9F\xac\x02V\xaf\xe8\xcfG.\xa8\x03sRU\xa2\xbf\xb7\xe4\x8d\xc24\xdc\xf1\xd7x\xef\xd4\xda\xbc>a\xc3\xb7\x19\xc5\xa3y\xf53\xf2,\x83\xd7 \xd1a\xcd\xbd/\xaf\x03\xd6\nP\xc5\x8f+\x04\f`?^-*\xf5j\r\xed\t\x00\xd5]5`\xf2S\xa7\xcc\xf5Z\xbc\xf3e\x83\xa2\xe0jUq%\x99\xa0\xac&[\xa8\xde8\xfb9\xe0\x02\xc9$\xbd?\xac\x984\xe6xY\x7f\x1cT\x87$\f\x91|\xd8\xa6\xf6\xb7\x16\xb2\xf4\xeec') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x2000004a}], 0x1, 0x8) [ 862.819812][ T4592] Error parsing options; rc = [-22] [ 862.901679][ T4597] fuse: Bad value for 'rootmode' 03:40:30 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) tkill(0x0, 0x16) 03:40:30 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 03:40:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r3) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = creat(0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x4002) io_setup(0x0, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = getpid() sched_setattr(r8, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r10 = getegid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r12 = getuid() r13 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r13, 0x0, r14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000740)="37a1b139d573e87b0bfe6d7ac266ed4c4ff01ba5607e4db6db51140d67764e75cfe7bb0d11f2bdacfcf52b868fbc43517a38172315de3136692cacc719c636d23d48e0ba2f38f0040b907a957d728024d492b1dbaffae1335786c0a99a380d55f3aed7ae1788da38d213d6f4a46483339b8661418e", 0x75}, {&(0x7f0000000480)="5a674782cb3751b5ba12365338b63a906f", 0x11}, {&(0x7f0000000800)="6dbfc8fc57ad41369c3841c965254930b5a8293f9d36793445092c2e3a665ee277f8a90932e91b70dbd67afb3bbd750ce422a03ee5320c1a21515eae6f550f059ef5fb78332b206efd8aab814bfc95e49d0cb1e74b69a3a7998a7e103e768545765d39c68a5468f052c06d596cfe9bb3c38e9c914cb0f3bf7ad58bb956087badee03e513cb4daefd36db9f356ebd3485cdffda20ae71032fd455400dd15c73ee60aeddae0a2134860e09569b3681da54e3e43f0646e068e7cc57a63fc8fd016f5f333b", 0xc3}, {&(0x7f0000000900)="54759a7ccb39a196eacd36033fa5b0a256c2bcc4abce592a7151ae8e125bd05538fec3a28e5bd4cf803c796c8bf01289bb6679bd764e367befdfa8b948150539db8b402bbcbad10631dc58c91e6869b487c54bfd6247f11d224b81dbd334e100c2c7057bc3b7671cbb90937453d0bef4deb83008acf0756c20417c511834891025fd6cd73721a52d0db75008f44c01d6de0769492b03ee27ef9fb060", 0x9c}, {&(0x7f00000009c0)}, {0x0}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200f8bd7b90d4c33563a1d622000006d06e2ca1631d0f7f526e49ecb5af44145734d511554dc2a1db780a1bc16b398ab6991dc75d665cbcf157b3dcd825b2d908bb75bff3f5ddeb1af5afef46eef5558bf881e7b4b211591231c1e820ef790f0b6d121030e5c40cedea5e4548b84727d97a1490ebbbaa2b7c4cb61cc00293cf87c7d89952490d11c7c724f0a1c0cbc30dd9e8f34b037273ed0f7f68d83871c0a3758b73040288d1e486a057641852e2e54cb573ee1d361388b9068e17484eba95337d334417", @ANYRES32=r8, @ANYRES32, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x132}, 0x12) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuse\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d4f303030303030303030303030303030303132303030302c757365725f69643d3df251f331e9fe648329800738edbd7565bb1c5f7adb2c7f62bb27bc58f25fdfcef816b0c9d781bf62426e4d17534f1e41485a25eb8d16569afd49d4b9a30c4d3dcec0be2e3dd342936827183df54f745aafe3f0eaf3599096a0e790d11c254aafb91115348f14bc0e8750f2648dd811593e748983a03f6f2125c91becdd79f8365a5373e32ceead15e1dc318d15951c32083442b101bb0bd577684d824c645fbbbb77604d1f00fdbf59208c9edda22c9dc951be0a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,appraise,\x00']) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x0, 0x8, 0x357}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x0, 0x81}], 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(0xffffffffffffffff, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x654) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r16, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15}) 03:40:30 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000380)={0xf, 0x8}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="4105f52d2daf42164d0670609ff77a2b7ac27c0315d98db454112f889c5e19", @ANYRES32=0x0], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 03:40:30 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:30 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r3) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = creat(0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x4002) io_setup(0x0, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = getpid() sched_setattr(r8, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r10 = getegid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r12 = getuid() r13 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r13, 0x0, r14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000740)="37a1b139d573e87b0bfe6d7ac266ed4c4ff01ba5607e4db6db51140d67764e75cfe7bb0d11f2bdacfcf52b868fbc43517a38172315de3136692cacc719c636d23d48e0ba2f38f0040b907a957d728024d492b1dbaffae1335786c0a99a380d55f3aed7ae1788da38d213d6f4a46483339b8661418e", 0x75}, {&(0x7f0000000480)="5a674782cb3751b5ba12365338b63a906f", 0x11}, {&(0x7f0000000800)="6dbfc8fc57ad41369c3841c965254930b5a8293f9d36793445092c2e3a665ee277f8a90932e91b70dbd67afb3bbd750ce422a03ee5320c1a21515eae6f550f059ef5fb78332b206efd8aab814bfc95e49d0cb1e74b69a3a7998a7e103e768545765d39c68a5468f052c06d596cfe9bb3c38e9c914cb0f3bf7ad58bb956087badee03e513cb4daefd36db9f356ebd3485cdffda20ae71032fd455400dd15c73ee60aeddae0a2134860e09569b3681da54e3e43f0646e068e7cc57a63fc8fd016f5f333b", 0xc3}, {&(0x7f0000000900)="54759a7ccb39a196eacd36033fa5b0a256c2bcc4abce592a7151ae8e125bd05538fec3a28e5bd4cf803c796c8bf01289bb6679bd764e367befdfa8b948150539db8b402bbcbad10631dc58c91e6869b487c54bfd6247f11d224b81dbd334e100c2c7057bc3b7671cbb90937453d0bef4deb83008acf0756c20417c511834891025fd6cd73721a52d0db75008f44c01d6de0769492b03ee27ef9fb060", 0x9c}, {&(0x7f00000009c0)}, {0x0}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200f8bd7b90d4c33563a1d622000006d06e2ca1631d0f7f526e49ecb5af44145734d511554dc2a1db780a1bc16b398ab6991dc75d665cbcf157b3dcd825b2d908bb75bff3f5ddeb1af5afef46eef5558bf881e7b4b211591231c1e820ef790f0b6d121030e5c40cedea5e4548b84727d97a1490ebbbaa2b7c4cb61cc00293cf87c7d89952490d11c7c724f0a1c0cbc30dd9e8f34b037273ed0f7f68d83871c0a3758b73040288d1e486a057641852e2e54cb573ee1d361388b9068e17484eba95337d334417", @ANYRES32=r8, @ANYRES32, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x132}, 0x12) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuse\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d4f303030303030303030303030303030303132303030302c757365725f69643d3df251f331e9fe648329800738edbd7565bb1c5f7adb2c7f62bb27bc58f25fdfcef816b0c9d781bf62426e4d17534f1e41485a25eb8d16569afd49d4b9a30c4d3dcec0be2e3dd342936827183df54f745aafe3f0eaf3599096a0e790d11c254aafb91115348f14bc0e8750f2648dd811593e748983a03f6f2125c91becdd79f8365a5373e32ceead15e1dc318d15951c32083442b101bb0bd577684d824c645fbbbb77604d1f00fdbf59208c9edda22c9dc951be0a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,appraise,\x00']) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x0, 0x8, 0x357}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x0, 0x81}], 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(0xffffffffffffffff, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x654) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r16, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15}) [ 863.479285][ T4605] fuse: Bad value for 'rootmode' 03:40:30 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:30 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 863.688059][ T4618] fuse: Bad value for 'rootmode' 03:40:31 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 03:40:31 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:31 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) tkill(0x0, 0x16) 03:40:31 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000003406000001ed000171185400000000006c640000000000007b0300fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436ecfa85a1ad12fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 03:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x8070ae9f) 03:40:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$unlink(0xc, 0x0, 0xfffffffffffffffd) 03:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x101) r3 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b['], 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r4, &(0x7f0000000240)="ce0410000013f9ff00911efc0bb35c", 0xf, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getresuid(&(0x7f0000000140), &(0x7f0000000380), 0x0) getgroups(0x6, &(0x7f0000000100)=[0xee00, 0xee00, 0x0, 0x0, 0xffffffffffffffff, 0xee01]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:31 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000000000001dd400300000000003406000001ed000171185400000000006c640000000000007b0300fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436ecfa85a1ad12fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 03:40:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 03:40:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:31 executing program 0: [ 864.872387][ C0] net_ratelimit: 32 callbacks suppressed [ 864.872400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.883908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.889831][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.895657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.962399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.968243][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:32 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:32 executing program 0: 03:40:32 executing program 4: 03:40:32 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x101) r3 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b['], 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r4, &(0x7f0000000240)="ce0410000013f9ff00911efc0bb35c", 0xf, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getresuid(&(0x7f0000000140), &(0x7f0000000380), 0x0) getgroups(0x6, &(0x7f0000000100)=[0xee00, 0xee00, 0x0, 0x0, 0xffffffffffffffff, 0xee01]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x101) r3 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b['], 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r4, &(0x7f0000000240)="ce0410000013f9ff00911efc0bb35c", 0xf, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9) getresuid(&(0x7f0000000140), &(0x7f0000000380), 0x0) getgroups(0x6, &(0x7f0000000100)=[0xee00, 0xee00, 0x0, 0x0, 0xffffffffffffffff, 0xee01]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 865.112399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 865.118293][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 865.282316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 865.288329][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:32 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:32 executing program 4: 03:40:32 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:32 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:32 executing program 1: 03:40:32 executing program 0: 03:40:32 executing program 4: 03:40:32 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:32 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:32 executing program 4: 03:40:32 executing program 0: 03:40:33 executing program 1: 03:40:33 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:33 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:33 executing program 0: 03:40:33 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:33 executing program 4: 03:40:33 executing program 1: 03:40:33 executing program 4: 03:40:33 executing program 0: 03:40:33 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:33 executing program 1: 03:40:33 executing program 4: 03:40:33 executing program 0: 03:40:34 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:34 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:34 executing program 4: 03:40:34 executing program 0: 03:40:34 executing program 1: 03:40:34 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:34 executing program 0: 03:40:34 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:34 executing program 1: 03:40:34 executing program 4: 03:40:34 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:34 executing program 0: 03:40:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:35 executing program 4: 03:40:35 executing program 1: 03:40:35 executing program 0: 03:40:35 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:35 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:35 executing program 1: 03:40:35 executing program 0: 03:40:35 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:35 executing program 4: ftruncate(0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x5a0}], 0x200000000000006f) 03:40:35 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='em1proc^eth1usermd5sum\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000004c0)='security.ima\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:40:35 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 868.543354][ T26] audit: type=1804 audit(2000000435.797:125): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir091917094/syzkaller.UQt88R/720/bus" dev="sda1" ino=16961 res=1 03:40:36 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:36 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x402812f6, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x4}) 03:40:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x8}, 0x0) 03:40:36 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:36 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:36 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:36 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc02812f8, &(0x7f0000000100)) 03:40:36 executing program 0: 03:40:36 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 869.394984][ T26] audit: type=1804 audit(2000000436.647:126): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir091917094/syzkaller.UQt88R/720/bus" dev="sda1" ino=16961 res=1 03:40:36 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000040)={0x7}, 0x7) 03:40:36 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='em1proc^eth1usermd5sum\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000004c0)='security.ima\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:40:36 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 869.717511][ T26] audit: type=1804 audit(2000000436.967:127): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir091917094/syzkaller.UQt88R/721/bus" dev="sda1" ino=17006 res=1 [ 871.112366][ C0] net_ratelimit: 32 callbacks suppressed [ 871.112376][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.123843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.129616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.135392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.192387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.198198][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.352364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.358166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 871.522377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 871.528132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 877.352368][ C0] net_ratelimit: 32 callbacks suppressed [ 877.358099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.363823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 877.369557][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.375270][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 877.432410][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.438230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 877.592377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.598208][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 877.752408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 877.758197][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:46 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='em1proc^eth1usermd5sum\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ftruncate(r1, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000280)='security.evm\x00', &(0x7f0000000380)=@v2={0x3, 0x3, 0x14, 0x404, 0x2, "78db"}, 0xc, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000002c0)=""/137) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:40:46 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='em1proc^eth1usermd5sum\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000004c0)='security.ima\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:40:46 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:46 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:46 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x407012ef, &(0x7f0000000100)) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) 03:40:46 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 879.664853][ T26] audit: type=1804 audit(2000000446.917:128): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/986/bus" dev="sda1" ino=17025 res=1 [ 879.744472][ T26] audit: type=1804 audit(2000000446.947:129): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/986/bus" dev="sda1" ino=17025 res=1 03:40:47 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 879.877787][ T26] audit: type=1804 audit(2000000446.977:130): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir147688713/syzkaller.AGZ7YB/743/bus" dev="sda1" ino=17031 res=1 03:40:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 03:40:47 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x801012f0, &(0x7f0000000100)) 03:40:47 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) pipe(0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="56f563761508f8ffffff00a311833f47c70329d4103b6d8a920e"], 0x1a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x70, 0x38, 0x7, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x8000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) creat(0x0, 0x0) [ 880.480715][ T26] audit: type=1804 audit(2000000447.727:131): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/986/bus" dev="sda1" ino=17025 res=1 [ 880.507751][ T26] audit: type=1804 audit(2000000447.727:132): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/986/bus" dev="sda1" ino=17025 res=1 [ 880.533580][ T26] audit: type=1804 audit(2000000447.727:133): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/986/bus" dev="sda1" ino=17025 res=1 [ 881.091840][ T26] audit: type=1804 audit(2000000448.337:134): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir091917094/syzkaller.UQt88R/725/file0" dev="sda1" ino=17026 res=1 [ 883.592344][ C0] net_ratelimit: 32 callbacks suppressed [ 883.592351][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 883.603822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 883.609585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 883.615336][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 883.672382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 883.678210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 883.832343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 883.838158][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 883.992751][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 883.998537][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:57 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:40:57 executing program 0: 03:40:57 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:40:57 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:40:57 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='em1proc^eth1usermd5sum\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ftruncate(r1, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000280)='security.evm\x00', &(0x7f0000000380)=@v2={0x3, 0x3, 0x14, 0x404, 0x2, "78db"}, 0xc, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000002c0)=""/137) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:40:57 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) pipe(0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="56f563761508f8ffffff00a311833f47c70329d4103b6d8a920e"], 0x1a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x70, 0x38, 0x7, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x8000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) creat(0x0, 0x0) [ 889.832326][ C0] net_ratelimit: 32 callbacks suppressed [ 889.832338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 889.843810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 889.849587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 889.855354][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:57 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) pipe(0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="56f563761508f8ffffff00a311833f47c70329d4103b6d8a920e"], 0x1a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x70, 0x38, 0x7, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x8000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) creat(0x0, 0x0) [ 889.912343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 889.918123][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:57 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) [ 889.959779][ T26] audit: type=1804 audit(2000000457.207:135): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/987/bus" dev="sda1" ino=17032 res=1 [ 890.044564][ T26] audit: type=1804 audit(2000000457.207:136): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir348502926/syzkaller.Z3amTe/987/bus" dev="sda1" ino=17032 res=1 [ 890.082329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 890.088164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 890.232485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 890.238657][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:57 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) 03:40:57 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) 03:40:58 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:40:58 executing program 4: [ 896.072350][ C0] net_ratelimit: 32 callbacks suppressed [ 896.078001][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 896.083731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 896.089456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 896.095205][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 896.152384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 896.158251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 896.312355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 896.318172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 896.472461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 896.478249][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:41:07 executing program 1: 03:41:07 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 03:41:07 executing program 4: 03:41:07 executing program 0: 03:41:07 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:07 executing program 1: 03:41:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8, 0x800}) 03:41:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_open_dev$vcsa(0x0, 0x0, 0x200000) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x3f}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socket$inet6(0xa, 0x0, 0x2) 03:41:07 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 03:41:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x490}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8, 0x800}) 03:41:07 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) [ 900.414805][ T26] audit: type=1800 audit(2000000467.667:137): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="hugetlb.2MB.e_in_bytes" dev="sda1" ino=16753 res=0 [ 902.312319][ C0] net_ratelimit: 32 callbacks suppressed [ 902.312327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.323794][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 902.329637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.335389][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 902.392401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.398175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 902.552355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.558139][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 902.712342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.718174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 908.552375][ C0] net_ratelimit: 32 callbacks suppressed [ 908.558133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.563957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 908.569726][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.575498][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 908.632391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.638184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 908.792397][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.798237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 908.952447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 908.958232][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:17 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:41:17 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:41:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8, 0x800}) 03:41:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x490}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8, 0x800}) 03:41:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_open_dev$vcsa(0x0, 0x0, 0x200000) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x3f}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socket$inet6(0xa, 0x0, 0x2) 03:41:17 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:17 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:41:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x490}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8, 0x800}) 03:41:17 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:41:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) io_cancel(0x0, 0x0, 0x0) 03:41:18 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:41:18 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 914.792379][ C0] net_ratelimit: 32 callbacks suppressed [ 914.798089][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 914.803860][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 914.809606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 914.815399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 914.872396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 914.878186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 915.032353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 915.038181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 915.192332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 915.198091][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122}, {&(0x7f0000001840)=""/4096}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238}, {&(0x7f0000000380)=""/217}, {&(0x7f00000001c0)=""/46}], 0x10000000000000ba) 03:41:27 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_open_dev$vcsa(0x0, 0x0, 0x200000) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x3f}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socket$inet6(0xa, 0x0, 0x2) 03:41:27 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:41:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) io_cancel(0x0, 0x0, 0x0) 03:41:27 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='hfsplus\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x882) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, &(0x7f00000001c0), 0x20002000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 03:41:27 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:27 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='hfsplus\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x882) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, &(0x7f00000001c0), 0x20002000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 03:41:27 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:41:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) 03:41:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) 03:41:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x3a6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7f2043ab09c50bebdfc9bd1e5f608aa8b4285cc2004b042312751bc6fdf2e40c5147174bc23896302cbf62a1cb1f6adf75ea289299531f58600"}}, 0x80}}, 0x0) [ 921.032505][ C0] net_ratelimit: 32 callbacks suppressed [ 921.032541][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.044373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.050414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.056561][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 921.122592][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.128716][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.272526][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.278584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.432589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.438660][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 927.272366][ C0] net_ratelimit: 32 callbacks suppressed [ 927.278034][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 927.283775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 927.289494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 927.295255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 927.352378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 927.358175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 927.512384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 927.518201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 927.672358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 927.678252][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, 0x0, 0x0) 03:41:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) 03:41:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x66) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @empty}, r1}}, 0x30) 03:41:37 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_open_dev$vcsa(0x0, 0x0, 0x200000) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x3f}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socket$inet6(0xa, 0x0, 0x2) 03:41:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) pipe(0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 03:41:37 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) 03:41:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:41:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) pipe(0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 03:41:38 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:41:38 executing program 4: 03:41:38 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 933.512356][ C0] net_ratelimit: 32 callbacks suppressed [ 933.512366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.523892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 933.529675][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.535458][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 933.592348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.598159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 933.752327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.758142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 933.912352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 933.918127][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 939.752372][ C0] net_ratelimit: 32 callbacks suppressed [ 939.758076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 939.763846][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 939.769665][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 939.775426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 939.832363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 939.838125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 939.992357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 939.998313][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 940.152334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 940.158147][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:48 executing program 0: 03:41:48 executing program 4: 03:41:48 executing program 2: 03:41:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:41:48 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, 0x0, 0x0) 03:41:48 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:48 executing program 0: 03:41:48 executing program 4: 03:41:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 03:41:48 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) lseek(r0, 0x0, 0x3) 03:41:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:41:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, 0x0) 03:41:48 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x10) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) tkill(r2, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, 0x0, 0xedc0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xe0, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x9}, 0x18) 03:41:48 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:41:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000840)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000880)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, 0x0, 0x0) 03:41:58 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:41:58 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:58 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) tkill(r2, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, 0x0, 0xedc0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) 03:41:58 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:41:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:41:58 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:41:58 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:41:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:41:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:41:59 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) [ 952.232325][ C0] net_ratelimit: 32 callbacks suppressed [ 952.232338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.243819][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 952.249585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.255345][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 952.322399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.328198][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 952.472338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.478163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 952.632388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.638206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 958.472361][ C0] net_ratelimit: 32 callbacks suppressed [ 958.478044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 958.483768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 958.489505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 958.495252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 958.552398][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 958.558217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 958.712362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 958.718206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 958.872354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 958.878213][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}], 0x7) 03:42:08 executing program 3: timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:42:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@rand_addr="4acb0edac0d35f4df2bb3a44274de969", @empty, @mcast2, 0x0, 0xb0d}) 03:42:08 executing program 2: 03:42:08 executing program 0: r0 = creat(0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:08 executing program 2: 03:42:08 executing program 4: 03:42:08 executing program 0: r0 = creat(0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:42:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}], 0x7) 03:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:09 executing program 2: 03:42:09 executing program 0: r0 = creat(0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:42:11 executing program 3: timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:42:11 executing program 4: 03:42:11 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:42:11 executing program 2: 03:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:11 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xf) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x36}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:42:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) 03:42:11 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) [ 964.712350][ C0] net_ratelimit: 32 callbacks suppressed [ 964.712362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 964.723834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 964.729609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 964.735474][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 964.792345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 964.798152][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 964.952337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 964.958206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 965.122400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 965.128221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 970.952384][ C0] net_ratelimit: 32 callbacks suppressed [ 970.958060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 970.963824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 970.969587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 970.975348][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 971.032383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 971.038200][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 971.192491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 971.198334][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 971.352388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 971.358225][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:19 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}], 0x7) 03:42:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d8214) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x79e2494) read(r1, 0x0, 0x0) 03:42:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:19 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x3}) 03:42:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000027000500d25a80648c63940d0124fc000c00044002000000053582c137153e370300000001f01700d1bd", 0x2e}], 0x1}, 0x0) 03:42:19 executing program 3: timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) [ 972.399863][ T5144] validate_nla: 18 callbacks suppressed [ 972.399877][ T5144] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 972.436044][ T5144] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:19 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) [ 972.477435][ T5149] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 972.497810][ T5149] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, &(0x7f0000000000), 0x4) 03:42:19 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 03:42:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, &(0x7f0000000000), 0x4) 03:42:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 977.192378][ C0] net_ratelimit: 32 callbacks suppressed [ 977.198110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.203918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 977.209702][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.215475][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 977.272391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.278204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 977.432409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.438222][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 977.592359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.598155][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:29 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {0x0}], 0x8) 03:42:29 executing program 2: 03:42:29 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 03:42:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:29 executing program 4: 03:42:29 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:42:29 executing program 2: 03:42:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:30 executing program 4: 03:42:30 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x3}) 03:42:30 executing program 2: 03:42:30 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x3}) [ 983.442351][ C0] net_ratelimit: 32 callbacks suppressed [ 983.442360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.453837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 983.459589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.465337][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 983.512353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.518174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 983.672339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.678142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 983.832370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.838122][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 989.672350][ C0] net_ratelimit: 32 callbacks suppressed [ 989.678020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 989.683780][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 989.689544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 989.695286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 989.752388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 989.758179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 989.912356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 989.918121][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 990.072392][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 990.078159][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:40 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {0x0}], 0x8) 03:42:40 executing program 4: 03:42:40 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003000), 0x216, 0x0, 0x0) 03:42:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x3}) 03:42:40 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:42:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='//.0\xff', 0x1c0) socket(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) socket(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24044010) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket(0x16, 0x4, 0xfb) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getgid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 03:42:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1}) 03:42:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:42:40 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003000), 0x216, 0x0, 0x0) 03:42:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:42:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1}) [ 993.408270][ T5218] device lo entered promiscuous mode [ 995.912341][ C0] net_ratelimit: 32 callbacks suppressed [ 995.912349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 995.923818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 995.929576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 995.935310][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 995.992360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 995.998130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 996.152356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 996.158124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 996.312375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 996.318163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.152350][ C0] net_ratelimit: 32 callbacks suppressed [ 1002.158128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.163873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.169619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.175347][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.232369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.238133][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.392376][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.398165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.552349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.558135][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {0x0}], 0x8) 03:42:50 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003000), 0x216, 0x0, 0x0) 03:42:50 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1}) 03:42:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:42:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='//.0\xff', 0x1c0) socket(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) socket(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24044010) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket(0x16, 0x4, 0xfb) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getgid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x15000000000000, 0x31, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 03:42:50 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:42:50 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003000), 0x216, 0x0, 0x0) 03:42:50 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvfrom$inet(r0, &(0x7f0000000280)=""/168, 0xa8, 0x0, 0x0, 0x0) 03:42:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:42:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:42:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='cwd/..\x00\x00\xd8s\x11Z\xb9\x8f\'PO\xf8\x83\x1aYb\xa6\x00\x8bZY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac') 03:42:50 executing program 4: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, 'GPL'}}]}}) [ 1003.552970][ T5294] fuse: Bad value for 'fd' [ 1008.392375][ C0] net_ratelimit: 32 callbacks suppressed [ 1008.398053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.403773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.409501][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.415238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.472364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.478171][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.632347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.638172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.792353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.798181][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:00 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:43:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:43:00 executing program 4: ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x800000000000937e, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f00000003c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x40140921, 0x0) 03:43:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x0) 03:43:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x5d61bcf84542f5bc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000000005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac38a4899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000000000"], 0xb8}}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 03:43:00 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:43:00 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:43:00 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000480)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, &(0x7f00000003c0), 0x0) 03:43:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) write$P9_RRENAMEAT(r2, 0x0, 0x0) r3 = msgget(0x3, 0x4) msgctl$IPC_RMID(r3, 0x0) 03:43:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000005) 03:43:00 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:43:00 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) creat(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 1014.632316][ C0] net_ratelimit: 32 callbacks suppressed [ 1014.632335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.643771][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.649519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.655262][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.712356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.718160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.872330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.878113][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1015.032358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.038134][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.872339][ C0] net_ratelimit: 32 callbacks suppressed [ 1020.878060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.883805][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.889542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.895269][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.952378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.958182][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1021.112356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.118186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1021.272369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.278238][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:10 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:43:10 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:43:10 executing program 4: 03:43:10 executing program 0: 03:43:10 executing program 2: 03:43:10 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:43:10 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x6}, 0x80, 0x0}}], 0x2, 0x0) 03:43:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) close(r2) 03:43:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = eventfd(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r2}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)) 03:43:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:11 executing program 4: [ 1027.112354][ C0] net_ratelimit: 32 callbacks suppressed [ 1027.118041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.123821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1027.129586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.135349][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1027.192475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.198328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1027.352424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.358255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1027.512357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.518141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.352364][ C0] net_ratelimit: 32 callbacks suppressed [ 1033.358074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.363834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.369575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.375303][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.432354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.438170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.592341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.598140][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:21 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:43:21 executing program 0: 03:43:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:21 executing program 4: 03:43:21 executing program 2: 03:43:21 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) [ 1033.762331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.768110][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:43:21 executing program 0: 03:43:21 executing program 2: 03:43:21 executing program 4: 03:43:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:43:21 executing program 2: r0 = socket(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) shutdown(r0, 0x0) [ 1039.592370][ C0] net_ratelimit: 32 callbacks suppressed [ 1039.598052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.603821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.609571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.615289][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.672342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.678102][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.832344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.838101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.992442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.998247][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:31 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {0x0}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:43:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x294) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff23, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c0000002c0001f9000001000000080000000000", @ANYRES32=r3, @ANYBLOB="20ed000000000000210004000b000100727376703600e6006c00e9cf59c17eb7176b8153f75cfbd1010005003c00010003000000ffff725021a32c591ab200000100000001007f0005000400fffffeff200107004000ffff0300000005000007003affff620b000014000300fe80000000000000000000000037df000000000000000000000001ce6d59bfab0c9df615a13771e8f45e14683e2b12513c0a2f6ca0f24b4d"], 0x9c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xd3, 0x0) 03:43:31 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:43:31 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:43:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]) uname(0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x1600, 0x4004400}) 03:43:31 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:43:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:43:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:43:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1044.774093][ C0] net_ratelimit: 33 callbacks suppressed [ 1044.774124][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1045.832337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.838140][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.843963][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.849688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.922349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.928159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1046.072336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.078152][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1046.232315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1049.992354][ C0] net_ratelimit: 19 callbacks suppressed [ 1049.998020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.003740][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.009472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.015204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.072388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.078252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.232344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.238161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.392387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.398186][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:41 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {0x0}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:43:41 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:43:41 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:43:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:43:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:43:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:43:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:43:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr="00000000000000000040d100"}, 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) [ 1056.232347][ C0] net_ratelimit: 36 callbacks suppressed [ 1056.232355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.243781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.249521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.255250][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.312403][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.318233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.472339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.478166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.632329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.638120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.472365][ C0] net_ratelimit: 32 callbacks suppressed [ 1062.478061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.483831][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.489615][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.495391][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.552394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.558195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.712350][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.718205][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.872370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.878217][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {0x0}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:43:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:51 executing program 4: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) write(r0, &(0x7f0000000240)="b156d417452c8f6d46edb3b1077f2abaa85e3489c66107abcc617d9aeb42aa515f23c9150bfdba5fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7e", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') 03:43:51 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:43:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4018aeff, 0x0) 03:43:51 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:43:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:43:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettaction={0x74, 0x32, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x1e, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x1a, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0xba00000}}]}]}, 0x74}}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f00000003c0)=@nl, &(0x7f00000004c0)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:01 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettaction={0x74, 0x32, 0x0, 0x70bd29, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x1e, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x1a, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0xd9}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xba00000}}]}]}, 0x74}}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000180)={0x1}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) exit(0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) 03:44:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') 03:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1074.952313][ C0] net_ratelimit: 32 callbacks suppressed [ 1074.952325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.963818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.969604][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.975393][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1075.032343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.038162][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:02 executing program 2: fstat(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000000)=0x24) 03:44:02 executing program 2: r0 = epoll_create1(0x0) flock(r0, 0x2) [ 1075.192319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.198140][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1075.352344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.358145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.192338][ C0] net_ratelimit: 32 callbacks suppressed [ 1081.192351][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.203823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.209599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.215372][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.272362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.278176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.432341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.438154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.592334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.598115][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:44:12 executing program 2: epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:44:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:12 executing program 0: pipe(&(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:12 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:12 executing program 0: pipe(&(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:12 executing program 4: r0 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x80ffff, r0}) 03:44:12 executing program 0: pipe(&(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0xb, 0x9, 0x9}, 0x3c) socket$packet(0x11, 0x3, 0x300) inotify_init1(0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 03:44:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5", 0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1087.432350][ C0] net_ratelimit: 32 callbacks suppressed [ 1087.438014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.443774][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.449613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.455388][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.512343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.518144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.672330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.678155][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.842331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.848118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.672344][ C0] net_ratelimit: 32 callbacks suppressed [ 1093.672352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.683763][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.689539][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.695307][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.752384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.758263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.912368][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.918132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.072322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.078091][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:22 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000100)) 03:44:22 executing program 4: 03:44:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5", 0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:22 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:44:22 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:22 executing program 2: 03:44:22 executing program 4: 03:44:22 executing program 2: 03:44:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5", 0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:22 executing program 4: 03:44:22 executing program 2: 03:44:23 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:23 executing program 4: 03:44:23 executing program 2: 03:44:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1099.912349][ C0] net_ratelimit: 32 callbacks suppressed [ 1099.912357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.923779][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.929521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.935275][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.992444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.998253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.152336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.158098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.312383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.318167][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:32 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:44:32 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:32 executing program 2: 03:44:32 executing program 4: 03:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:44:32 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:32 executing program 2: 03:44:32 executing program 4: 03:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="dcb5ac", 0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:44:32 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x1, 0xef9190a9a75d0eee) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0x7, 0x0, 0x0, 0x70bd28, 0x0, {0xc406e3c4feb1991d, 0x0, 0x2}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 03:44:32 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x1, 0xef9190a9a75d0eee) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0x7, 0x0, 0x0, 0x70bd28, 0x0, {0xc406e3c4feb1991d, 0x0, 0x2}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2d, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 1105.744299][ C1] net_ratelimit: 32 callbacks suppressed [ 1105.744345][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1105.788329][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:44:33 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) [ 1106.058266][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1106.155144][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1106.162310][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.171994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.177790][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.183567][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.232341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.238148][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.872329][ C0] net_ratelimit: 32 callbacks suppressed [ 1110.878016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.883750][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.112345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.118131][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.392442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.398291][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.404046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.409795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.472391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.478201][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:42 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:44:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4010aefb, &(0x7f0000000200)) 03:44:42 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) tkill(r1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xe0, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000}, 0x18) 03:44:42 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x1, 0xef9190a9a75d0eee) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0x7, 0x0, 0x0, 0x70bd28, 0x0, {0xc406e3c4feb1991d, 0x0, 0x2}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2d, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 03:44:42 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:42 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:43 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:43 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x1, 0xef9190a9a75d0eee) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, 0x7, 0x0, 0x0, 0x70bd28, 0x0, {0xc406e3c4feb1991d, 0x0, 0x2}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2d, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 03:44:43 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0xa84233b14b11c08d, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./bus/../file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000000)) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:44:43 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 1116.068294][ C0] net_ratelimit: 23 callbacks suppressed [ 1116.068354][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:44:43 executing program 0: pipe(0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 1116.552316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.558164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.564008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.569799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.632373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.638186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.792358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.798267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.952337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.112364][ C0] net_ratelimit: 27 callbacks suppressed [ 1121.118051][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.123816][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.272360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.278157][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.512375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.518167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1122.792393][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1122.798226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1122.803994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1122.809740][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:53 executing program 0: pipe(0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:53 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x2}, {0x5}, {0x3, 0xfc}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, [], 0x81}, {}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, [], 0x5}, {}, {}, {0x0, 0x3, 0x6}, {0x7}]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x0, 0x1, 0x1, 0x5]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:53 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {0x0}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:44:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x24) sched_setattr(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x400, 0x0) pipe(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x654) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x1}) 03:44:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syncfs(0xffffffffffffffff) open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xb, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getegid() getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, 0x0, r3) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x0, 0x81}], 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15}) 03:44:53 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:44:53 executing program 0: pipe(0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:53 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x24) sched_setattr(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x400, 0x0) pipe(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x654) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x1}) 03:44:53 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:44:53 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:53 executing program 4: setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) 03:44:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syncfs(0xffffffffffffffff) open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0xb, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getegid() getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, 0x0, r3) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x0, 0x81}], 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15}) 03:44:53 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 1126.952324][ C0] net_ratelimit: 24 callbacks suppressed [ 1126.952336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.963781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.969505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.975238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.032345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.038182][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.192354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.198139][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.352342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.358132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.192359][ C0] net_ratelimit: 32 callbacks suppressed [ 1133.198053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.203810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.209574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.215332][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.272364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.278167][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.432387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.438181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.592365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.598203][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:03 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:45:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) 03:45:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@remote}) 03:45:03 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:03 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) 03:45:03 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:03 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:45:03 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) 03:45:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) 03:45:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) 03:45:04 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) 03:45:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) [ 1138.133224][T10074] device bridge_slave_1 left promiscuous mode [ 1138.139564][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.203043][T10074] device bridge_slave_0 left promiscuous mode [ 1138.209296][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.342661][T10074] device hsr_slave_0 left promiscuous mode [ 1138.382629][T10074] device hsr_slave_1 left promiscuous mode [ 1138.429907][T10074] team0 (unregistering): Port device team_slave_1 removed [ 1138.440041][T10074] team0 (unregistering): Port device team_slave_0 removed [ 1138.450101][T10074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.487427][T10074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.554385][T10074] bond0 (unregistering): Released all slaves [ 1139.432346][ C0] net_ratelimit: 32 callbacks suppressed [ 1139.432354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.443775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.449506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.455239][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.512383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.518176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.672368][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.678176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.832342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.838102][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.672349][ C0] net_ratelimit: 26 callbacks suppressed [ 1145.678021][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.683788][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.689542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.695290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.752360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.758123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.912383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.918227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.072385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.078175][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:13 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:13 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:13 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:45:13 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) 03:45:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) 03:45:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) 03:45:13 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:45:14 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1d") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:14 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:14 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:45:15 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1d") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:15 executing program 0: pipe(&(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:15 executing program 0: pipe(&(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:15 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) [ 1148.527974][ T5783] IPVS: ftp: loaded support on port[0] = 21 [ 1148.632107][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 1148.704008][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.711273][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.719633][ T5783] device bridge_slave_0 entered promiscuous mode [ 1148.731014][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.738377][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.746290][ T5783] device bridge_slave_1 entered promiscuous mode [ 1148.762071][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.772879][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.791280][ T5783] team0: Port device team_slave_0 added [ 1148.798019][ T5783] team0: Port device team_slave_1 added [ 1148.854512][ T5783] device hsr_slave_0 entered promiscuous mode [ 1148.902630][ T5783] device hsr_slave_1 entered promiscuous mode [ 1148.942428][ T5783] debugfs: Directory 'hsr0' with parent '/' already present! [ 1148.956786][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.963915][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.971140][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.978237][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.021612][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.039193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1149.051817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.071215][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.084294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1149.101380][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.115908][ T5790] IPVS: ftp: loaded support on port[0] = 21 [ 1149.126082][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1149.142921][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.150068][ T8004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.170199][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1149.178985][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.186091][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.209906][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1149.220369][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.240833][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1149.249601][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1149.258758][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1149.267685][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1149.276182][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1149.284087][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1149.322191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1149.334906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1149.371383][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 1149.393043][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.417697][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.425694][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.433827][ T5790] device bridge_slave_0 entered promiscuous mode [ 1149.441452][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.448699][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.456511][ T5790] device bridge_slave_1 entered promiscuous mode [ 1149.475123][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.485794][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.503134][ T5790] team0: Port device team_slave_0 added [ 1149.509631][ T5790] team0: Port device team_slave_1 added [ 1149.575339][ T5790] device hsr_slave_0 entered promiscuous mode [ 1149.612991][ T5790] device hsr_slave_1 entered promiscuous mode [ 1149.657568][ T5790] debugfs: Directory 'hsr0' with parent '/' already present! [ 1149.700774][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.711774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1149.720045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1149.730450][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.741022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1149.754974][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1149.764009][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.771043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.794596][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1149.803240][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1149.811786][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1149.820394][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.827432][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.837189][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1149.846387][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1149.855322][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1149.863955][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1149.872572][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1149.881000][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1149.890059][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1149.898676][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1149.907156][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1149.915710][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1149.990830][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1150.000960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1150.020851][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.030151][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1150.037637][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1150.933113][T27835] device bridge_slave_1 left promiscuous mode [ 1150.939376][T27835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.002776][T27835] device bridge_slave_0 left promiscuous mode [ 1151.008949][T27835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.752714][T27835] device hsr_slave_0 left promiscuous mode [ 1151.812487][T27835] device hsr_slave_1 left promiscuous mode [ 1151.880136][T27835] team0 (unregistering): Port device team_slave_1 removed [ 1151.890040][T27835] team0 (unregistering): Port device team_slave_0 removed [ 1151.900117][T27835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.912331][ C0] net_ratelimit: 42 callbacks suppressed [ 1151.912341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.923751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1151.929473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.935223][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1151.948851][T27835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.992361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.998141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.036327][T27835] bond0 (unregistering): Released all slaves [ 1152.152352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.158123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.312334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.318089][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.932956][T27835] device bridge_slave_1 left promiscuous mode [ 1153.939244][T27835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.993279][T27835] device bridge_slave_0 left promiscuous mode [ 1153.999426][T27835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.742675][T27835] device hsr_slave_0 left promiscuous mode [ 1154.802456][T27835] device hsr_slave_1 left promiscuous mode [ 1154.869623][T27835] team0 (unregistering): Port device team_slave_1 removed [ 1154.879898][T27835] team0 (unregistering): Port device team_slave_0 removed [ 1154.889672][T27835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.915970][T27835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.993785][T27835] bond0 (unregistering): Released all slaves 03:45:23 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:45:23 executing program 0: pipe(&(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:23 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1d") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:23 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) 03:45:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x8, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) ptrace$peekuser(0x3, 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x5, 0x8, 0x0, 0x0, 0x0, 0x800}, {0x803, 0x4000000, 0x80000001}]}) dup2(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0x2}, {&(0x7f00000002c0), 0x0, 0x4}, {&(0x7f0000000340)="2136f2970fb9ead6daaffb766b948c77654899e732b66c632e6120b2cbb172b449686e497fc66add406c25ae8182c19bb9ccad697b0af6ab5c809b1531b724d15f86764cccf5442c2fab550648dc4d39efc1281d49652147deab88620a6d735056943b20c1b5c46500a681732c83d3", 0x6f}], 0x1002, &(0x7f0000000580)=ANY=[@ANYBLOB='aXto_da_alloc\a\x00\x00\x0000000007fff,dont_measure,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) open$dir(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) dup(r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) 03:45:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) 03:45:24 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:24 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:24 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:45:24 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, 0x0, 0x0) 03:45:24 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:24 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) [ 1158.152323][ C0] net_ratelimit: 28 callbacks suppressed [ 1158.152338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.163967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.169748][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.175531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.232356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.238154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.392335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.398276][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.552327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.558176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.559840][ T5837] IPVS: ftp: loaded support on port[0] = 21 [ 1158.626585][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 1158.653655][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.660714][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.668502][ T5837] device bridge_slave_0 entered promiscuous mode [ 1158.676160][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.683282][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.690903][ T5837] device bridge_slave_1 entered promiscuous mode [ 1158.708988][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.719513][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.740158][ T5837] team0: Port device team_slave_0 added [ 1158.746718][ T5837] team0: Port device team_slave_1 added [ 1158.814976][ T5837] device hsr_slave_0 entered promiscuous mode [ 1158.852670][ T5837] device hsr_slave_1 entered promiscuous mode [ 1158.892341][ T5837] debugfs: Directory 'hsr0' with parent '/' already present! [ 1158.906752][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.913795][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.921014][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.928105][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.960991][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.973442][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.981484][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.989507][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.998352][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1159.010429][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.021626][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.030229][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.037282][ T8004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.049509][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1159.058982][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.066043][ T8004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.086753][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1159.103105][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1159.111657][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1159.121198][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1159.133367][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1159.145038][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1159.153931][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1159.173778][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.181681][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.195579][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.209878][ T5840] IPVS: ftp: loaded support on port[0] = 21 [ 1159.294298][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 1159.322069][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.329290][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.337385][ T5840] device bridge_slave_0 entered promiscuous mode [ 1159.345052][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.352101][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.360703][ T5840] device bridge_slave_1 entered promiscuous mode [ 1159.380436][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.391185][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.411824][ T5840] team0: Port device team_slave_0 added [ 1159.418496][ T5840] team0: Port device team_slave_1 added [ 1159.477459][ T5840] device hsr_slave_0 entered promiscuous mode [ 1159.512719][ T5840] device hsr_slave_1 entered promiscuous mode [ 1159.552396][ T5840] debugfs: Directory 'hsr0' with parent '/' already present! [ 1159.566844][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.573915][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.581209][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.588319][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.620854][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.629922][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.638010][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.652050][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.660273][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.669885][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.679528][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1159.688453][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.696894][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.704022][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.717155][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1159.725890][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1159.734748][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.741829][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.749833][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1159.761369][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1159.773771][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1159.782244][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1159.791400][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1159.801428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1159.810295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1159.823160][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1159.831635][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1159.840250][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1159.848884][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1159.858507][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1159.874235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.881600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.892477][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.232730][ T8012] device bridge_slave_1 left promiscuous mode [ 1161.238966][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.273276][ T8012] device bridge_slave_0 left promiscuous mode [ 1161.279552][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.052596][ T8012] device hsr_slave_0 left promiscuous mode [ 1162.112442][ T8012] device hsr_slave_1 left promiscuous mode [ 1162.160010][ T8012] team0 (unregistering): Port device team_slave_1 removed [ 1162.170310][ T8012] team0 (unregistering): Port device team_slave_0 removed [ 1162.181759][ T8012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.226071][ T8012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.314706][ T8012] bond0 (unregistering): Released all slaves [ 1163.752343][ C1] net_ratelimit: 44 callbacks suppressed [ 1163.752354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.763883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.392401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.398209][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.404008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.409772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.472354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.479849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.632347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.638113][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:34 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:34 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, 0x0, 0x0) 03:45:34 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r0, 0x0) 03:45:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000340)={'nat\x00'}, &(0x7f00000003c0)=0x35) 03:45:34 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:45:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002f000000d4286ebbcf6fac6c9500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) pipe2(&(0x7f0000000300), 0x104800) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 03:45:34 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) syz_open_procfs(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/74], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d0000000000000000000000000000000000000000000000000003800534e415400000000000000000000000000000000000000000000000000000100000000000000e0000002ac1414aa0000000000000000ac1414bbac141400000000000000000074657108300000000000000000000000697036746e6c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000c0002001000000000000000000000000000000000000000000000000280069636d700000000000000000000000000000000000000000000000000000000006000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000001000000000000000000000000000000000000000000000000000000e000000200000000000000ff6263736830000000000000000000000064756d6d793000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000600000000000000000000000000009800d000000000000000000000000000000000000000000000000000380053455400000000000000000000000000000000000000000000000000000304000009070000690900001f00000000000000000000000000000000e000000200000000000000006c61706230000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002580000000000000000000000000000000138010000000000000000000000000000000000000000000000002800736f636b65740000000000000000000000000000000000000000000000010000000000000000400073657400000000000000000000000000000000000000000000000000000000000000000000000100000000000000110000000000000000000000000000003800524544495245435400000000000000000000000000000000000000000000010000000000000000000006e0000001000000640000"], 0x2) ftruncate(r1, 0x8200) syz_open_procfs(0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x35, &(0x7f0000002000)={@multicast1, @dev, @loopback}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000fc0)={@initdev}, &(0x7f0000001000)=0x14) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240), 0x8) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0xb5, "9c34963f9e21dafb5f53df4caa135da8742307fb23d4603c4808ac0eb0c149ef56a130e798d7dce6aac06d2e87e8b9081f2676e3da839a687b948e5177f9352257193dfffab1c76ca469fb05083fa6a421cff2d04489ee8e2c0f740cec5af583871279c32deb2c2da840c89fb5c5a6930d6ca31d2b1c45b478e8af545914377e5db7e3aad1df7fc5ec73cea03c848f405b2a9f799da5ac9a34496a2a59d04fa5e5ee2aa39dbce812efcc6ff036be5831ea2737d9ac"}, &(0x7f0000000000)=0xbd) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 03:45:34 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) syz_open_procfs(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/74], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d0000000000000000000000000000000000000000000000000003800534e415400000000000000000000000000000000000000000000000000000100000000000000e0000002ac1414aa0000000000000000ac1414bbac141400000000000000000074657108300000000000000000000000697036746e6c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000c0002001000000000000000000000000000000000000000000000000280069636d700000000000000000000000000000000000000000000000000000000006000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000001000000000000000000000000000000000000000000000000000000e000000200000000000000ff6263736830000000000000000000000064756d6d793000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000600000000000000000000000000009800d000000000000000000000000000000000000000000000000000380053455400000000000000000000000000000000000000000000000000000304000009070000690900001f00000000000000000000000000000000e000000200000000000000006c61706230000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002580000000000000000000000000000000138010000000000000000000000000000000000000000000000002800736f636b65740000000000000000000000000000000000000000000000010000000000000000400073657400000000000000000000000000000000000000000000000000000000000000000000000100000000000000110000000000000000000000000000003800524544495245435400000000000000000000000000000000000000000000010000000000000000000006e0000001000000640000"], 0x2) ftruncate(r1, 0x8200) syz_open_procfs(0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x35, &(0x7f0000002000)={@multicast1, @dev, @loopback}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000fc0)={@initdev}, &(0x7f0000001000)=0x14) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240), 0x8) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0xb5, "9c34963f9e21dafb5f53df4caa135da8742307fb23d4603c4808ac0eb0c149ef56a130e798d7dce6aac06d2e87e8b9081f2676e3da839a687b948e5177f9352257193dfffab1c76ca469fb05083fa6a421cff2d04489ee8e2c0f740cec5af583871279c32deb2c2da840c89fb5c5a6930d6ca31d2b1c45b478e8af545914377e5db7e3aad1df7fc5ec73cea03c848f405b2a9f799da5ac9a34496a2a59d04fa5e5ee2aa39dbce812efcc6ff036be5831ea2737d9ac"}, &(0x7f0000000000)=0xbd) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 03:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e24, 0x1000000080000, @local}, 0x1c, 0x0}, 0x0) 03:45:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 03:45:35 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r0, 0x0) 03:45:35 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) timer_settime(0x0, 0x0, 0x0, 0x0) 03:45:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xf) [ 1167.967716][ T5890] device nr0 entered promiscuous mode 03:45:35 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:45:35 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') [ 1168.802334][ C0] net_ratelimit: 26 callbacks suppressed [ 1168.802341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.813806][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.848718][ T5910] IPVS: ftp: loaded support on port[0] = 21 [ 1168.901303][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 1168.928538][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.935649][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.943931][ T5910] device bridge_slave_0 entered promiscuous mode [ 1168.951295][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.958658][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.962327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.966501][ T5910] device bridge_slave_1 entered promiscuous mode [ 1168.971444][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.990986][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.001367][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.021762][ T5910] team0: Port device team_slave_0 added [ 1169.028754][ T5910] team0: Port device team_slave_1 added [ 1169.104727][ T5910] device hsr_slave_0 entered promiscuous mode [ 1169.122325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.128107][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.142685][ T5910] device hsr_slave_1 entered promiscuous mode [ 1169.192388][ T5910] debugfs: Directory 'hsr0' with parent '/' already present! [ 1169.235558][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.247146][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1169.255021][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1169.265054][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.274699][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1169.283435][ T8004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1169.291878][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.298956][ T8004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.307599][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1169.325774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1169.334373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1169.343348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.350389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.358283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1169.367513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1169.376641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1169.385471][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1169.395421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1169.413256][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1169.421528][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1169.431114][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1169.439975][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1169.448719][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1169.457200][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1169.467450][ T5910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1169.483019][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1169.490392][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1169.501508][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.582323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.588118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.702361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.708194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.072413][ C1] net_ratelimit: 34 callbacks suppressed [ 1174.078110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.084039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.152417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.158336][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.792381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.798319][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.804123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.809844][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.872434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.878261][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:45:44 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r0, 0x0) 03:45:44 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 03:45:44 executing program 0: 03:45:44 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:44 executing program 2: 03:45:44 executing program 2: 03:45:44 executing program 0: [ 1177.209704][ T5926] binder: 5920:5926 ioctl c018620c 20000040 returned -1 [ 1177.305332][ T5926] binder: 5920:5926 ioctl c018620c 20000040 returned -1 03:45:44 executing program 2: 03:45:44 executing program 0: 03:45:44 executing program 4: add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="c3", 0x1, 0xfffffffffffffffb) 03:45:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r3) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = open(0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000f40)="ac23d5d2aa6f179661db4e18f9bee37da29ada9877650ea2ae58888f72cd8c07ddb4de16a31af0e8e500396f1652affa8b10e5a3a55ea11a4afa367015eaf40efb1d6f0e17b47853ed8e809278badf4f2c9797044e96c5e5274d19c3b9a7b3c9618ab8f5dc047d1160ddeb5c6f88e2abb85ffd534ad86578e20c1405e5a05e28090fb36e4a52140fd446f09e15a2d8dff8909f640c9d43c05d75fe7a159223a17d8c3defc3d6c4412599d617ab1c1f5209e89f3dea7a71714cb000f698504406b95837c6555cf8ca181136d46b5677202a", 0xd1, 0x0, 0x0, 0x0, r8}]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x400, 0x24) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r14 = getegid() r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) r16 = getpid() sched_setattr(r16, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r17 = getuid() r18 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r18, 0x0, r19) sendmsg$unix(r6, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000740)="37a1b139d573e87b0bfe6d7ac266ed4c4ff01ba5607e4db6db51140d67764e75cfe7bb0d11f2bdacfcf52b868fbc43517a38172315de3136692cacc719c636d23d48e0ba2f38f0040b907a957d728024d492b1dbaffae1335786c0a99a380d55f3aed7ae1788da38d213d6f4a46483339b8661418e606dd756c4c27dae75e2a6175563962876552a248bdf3b62", 0x8d}, {&(0x7f0000000480)="5a674782cb3751b5ba12365338b63a906fc393727ae7", 0x16}, {&(0x7f0000000800)="6dbfc8fc57ad41369c3841c965254930b5a8293f9d36793445092c2e3a665ee277f8a90932e91b70dbd67afb3bbd750ce422a03ee5320c1a21515eae6f550f059ef5fb78332b206efd8aab814bfc95e49d0cb1e74b69a3a7998a7e103e768545765d39c68a5468f052c06d596cfe9bb3c38e9c914cb0f3bf7ad58bb956087badee03e513cb4daefd36db9f356ebd3485cdffda20ae71032fd455400dd15c73ee60aeddae0a2134860e09569b3681da54e3e43f0646e068e7cc57a63fc8fd016f5f333b", 0xc3}, {&(0x7f0000000900)="54759a7ccb39a196eacd36033fa5b0a256c2bcc4abce592a7151ae8e125bd05538fec3a28e5bd4cf803c796c8bf01289bb6679bd764e367befdfa8b948150539db8b402bbcbad10631dc58c91e6869b487c54bfd6247f11d224b81dbd334e100c2c7057bc3b7671cbb90937453d0bef4deb83008acf0756c20417c511834891025fd6cd73721a52d0db75008f44c01d6de0769492b03ee27ef9fb060", 0x9c}, {&(0x7f00000009c0)="7d1f1b05481769b018b29c6878375f5899d9d111ea8d773caa7cdb9cfaa79a0aec91f9d37ab917050730672c0480b0c62257f3a429c33b0f6d2025d85372e957a1e6c7f52ab21d3efb9943a0077d929858d63848deca84b28cd8c15da6a6f4922f590272b8248c7fd952846c9ab11fb36c3c31a88d", 0x75}, {&(0x7f0000000a40)}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c00000000000000010000000200f8bd7b90d4c33563a1d622000006d06e2ca1631d0f7f526e49ecb5af44145734d511554dc2a1db780a1bc16b398ab6991dc75d665cbcf157b3dcd825b2d908bb75bff3f5ddeb1af5afef46eef5558bf881e7b4b211591231c1e820ef790f0b6d121030e5c40cedea5e4548b84727d97a1490ebbbaa2b7c4cb61cc00293cf87c7d89952490d11c7c724f0a1c0cbc30dd9e8f34b037273ed0f7f68d83871c0a3758b73040288d1e486a057641852e2e54cb573ee1d361388b9068e17484eba95337d334417", @ANYRES32=r11, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x4000}, 0x12) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuse\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d4f303030303030303030303030303030303132303030302c757365725f69643d3df251f331e9fe648329800738edbd7565bb1c5f7adb2c7f62bb27bc58f25fdfcef816b0c9d781bf62426e4d17534f1e41485a25eb8d16569afd49d4b9a30c4d3dcec0be2e3dd342936827183df54f745aafe3f0eaf3599096a0e790d11c254aafb91115348f14bc0e8750f2648dd811593e748983a03f6f2125c91becdd79f8365a5373e32ceead15e1dc318d15951c32083442b101bb0bd577684d824c645fbbbb77604d1f00fdbf59208c9edda22c9dc951be0a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r14, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,appraise,\x00']) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xdb2, 0x8, 0x357}) pipe(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@mss, @timestamp, @window={0x3, 0x0, 0x81}], 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = socket$alg(0x26, 0x5, 0x0) bind$alg(r20, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(0xffffffffffffffff, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r21 = epoll_create(0x654) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r21, 0x3, r22, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x1}) [ 1177.710178][ T5945] fuse: Bad value for 'rootmode' [ 1177.829357][ T5945] fuse: Bad value for 'rootmode' [ 1179.192387][ C0] net_ratelimit: 32 callbacks suppressed [ 1179.192395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.203859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.352352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.358192][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.522340][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.528132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.312336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.318145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.392365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.398158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.472353][ C1] net_ratelimit: 28 callbacks suppressed [ 1184.472361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.483787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.552360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.558128][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.192356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.198132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.203982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.209757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.272360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.278187][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:54 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:45:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 03:45:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r3) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = open(0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000f40)="ac23d5d2aa6f179661db4e18f9bee37da29ada9877650ea2ae58888f72cd8c07ddb4de16a31af0e8e500396f1652affa8b10e5a3a55ea11a4afa367015eaf40efb1d6f0e17b47853ed8e809278badf4f2c9797044e96c5e5274d19c3b9a7b3c9618ab8f5dc047d1160ddeb5c6f88e2abb85ffd534ad86578e20c1405e5a05e28090fb36e4a52140fd446f09e15a2d8dff8909f640c9d43c05d75fe7a159223a17d8c3defc3d6c4412599d617ab1c1f5209e89f3dea7a71714cb000f698504406b95837c6555cf8ca181136d46b5677202a", 0xd1, 0x0, 0x0, 0x0, r8}]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x400, 0x24) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r14 = getegid() r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) r16 = getpid() sched_setattr(r16, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r17 = getuid() r18 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r18, 0x0, r19) sendmsg$unix(r6, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000740)="37a1b139d573e87b0bfe6d7ac266ed4c4ff01ba5607e4db6db51140d67764e75cfe7bb0d11f2bdacfcf52b868fbc43517a38172315de3136692cacc719c636d23d48e0ba2f38f0040b907a957d728024d492b1dbaffae1335786c0a99a380d55f3aed7ae1788da38d213d6f4a46483339b8661418e606dd756c4c27dae75e2a6175563962876552a248bdf3b62", 0x8d}, {&(0x7f0000000480)="5a674782cb3751b5ba12365338b63a906fc393727ae7", 0x16}, {&(0x7f0000000800)="6dbfc8fc57ad41369c3841c965254930b5a8293f9d36793445092c2e3a665ee277f8a90932e91b70dbd67afb3bbd750ce422a03ee5320c1a21515eae6f550f059ef5fb78332b206efd8aab814bfc95e49d0cb1e74b69a3a7998a7e103e768545765d39c68a5468f052c06d596cfe9bb3c38e9c914cb0f3bf7ad58bb956087badee03e513cb4daefd36db9f356ebd3485cdffda20ae71032fd455400dd15c73ee60aeddae0a2134860e09569b3681da54e3e43f0646e068e7cc57a63fc8fd016f5f333b", 0xc3}, {&(0x7f0000000900)="54759a7ccb39a196eacd36033fa5b0a256c2bcc4abce592a7151ae8e125bd05538fec3a28e5bd4cf803c796c8bf01289bb6679bd764e367befdfa8b948150539db8b402bbcbad10631dc58c91e6869b487c54bfd6247f11d224b81dbd334e100c2c7057bc3b7671cbb90937453d0bef4deb83008acf0756c20417c511834891025fd6cd73721a52d0db75008f44c01d6de0769492b03ee27ef9fb060", 0x9c}, {&(0x7f00000009c0)="7d1f1b05481769b018b29c6878375f5899d9d111ea8d773caa7cdb9cfaa79a0aec91f9d37ab917050730672c0480b0c62257f3a429c33b0f6d2025d85372e957a1e6c7f52ab21d3efb9943a0077d929858d63848deca84b28cd8c15da6a6f4922f590272b8248c7fd952846c9ab11fb36c3c31a88d", 0x75}, {&(0x7f0000000a40)}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c00000000000000010000000200f8bd7b90d4c33563a1d622000006d06e2ca1631d0f7f526e49ecb5af44145734d511554dc2a1db780a1bc16b398ab6991dc75d665cbcf157b3dcd825b2d908bb75bff3f5ddeb1af5afef46eef5558bf881e7b4b211591231c1e820ef790f0b6d121030e5c40cedea5e4548b84727d97a1490ebbbaa2b7c4cb61cc00293cf87c7d89952490d11c7c724f0a1c0cbc30dd9e8f34b037273ed0f7f68d83871c0a3758b73040288d1e486a057641852e2e54cb573ee1d361388b9068e17484eba95337d334417", @ANYRES32=r11, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x4000}, 0x12) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuse\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d4f303030303030303030303030303030303132303030302c757365725f69643d3df251f331e9fe648329800738edbd7565bb1c5f7adb2c7f62bb27bc58f25fdfcef816b0c9d781bf62426e4d17534f1e41485a25eb8d16569afd49d4b9a30c4d3dcec0be2e3dd342936827183df54f745aafe3f0eaf3599096a0e790d11c254aafb91115348f14bc0e8750f2648dd811593e748983a03f6f2125c91becdd79f8365a5373e32ceead15e1dc318d15951c32083442b101bb0bd577684d824c645fbbbb77604d1f00fdbf59208c9edda22c9dc951be0a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r14, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,appraise,\x00']) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xdb2, 0x8, 0x357}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@mss, @timestamp, @window={0x3, 0x0, 0x81}], 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = socket$alg(0x26, 0x5, 0x0) bind$alg(r20, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(0xffffffffffffffff, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r21 = epoll_create(0x654) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r21, 0x3, r22, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x1}) 03:45:54 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:45:54 executing program 0: sysinfo(&(0x7f0000000000)=""/22) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\xff\xff', @ifru_flags}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) 03:45:54 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:45:54 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc0000002400070500000015e4d1929c38025c00", @ANYRES32, @ANYBLOB="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"], 0xcc}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1187.518521][ T5961] fuse: Bad value for 'rootmode' 03:45:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x5d61bcf84542f5bc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000000005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac38a4899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000000000"], 0xb8}}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x17}, 0x10}}, 0x0) [ 1187.676299][ T5968] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1187.685949][ T5968] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1187.749281][ T5961] fuse: Bad value for 'rootmode' 03:45:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x134, 0x17, 0x801, 0x0, 0x0, {{@in=@empty}, @in6=@loopback, {@in6=@mcast2, @in=@multicast1}, {{@in=@local, @in6=@local}}}, [@mark={0xc}]}, 0x134}}, 0x0) 03:45:55 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4010000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x7b, 0xa, 0xff00}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:45:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x90) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r3) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = open(0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000f40)="ac23d5d2aa6f179661db4e18f9bee37da29ada9877650ea2ae58888f72cd8c07ddb4de16a31af0e8e500396f1652affa8b10e5a3a55ea11a4afa367015eaf40efb1d6f0e17b47853ed8e809278badf4f2c9797044e96c5e5274d19c3b9a7b3c9618ab8f5dc047d1160ddeb5c6f88e2abb85ffd534ad86578e20c1405e5a05e28090fb36e4a52140fd446f09e15a2d8dff8909f640c9d43c05d75fe7a159223a17d8c3defc3d6c4412599d617ab1c1f5209e89f3dea7a71714cb000f698504406b95837c6555cf8ca181136d46b5677202a", 0xd1, 0x0, 0x0, 0x0, r8}]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x400, 0x24) r11 = getpid() sched_setattr(r11, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r14 = getegid() r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) r16 = getpid() sched_setattr(r16, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r17 = getuid() r18 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r18, 0x0, r19) sendmsg$unix(r6, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000740)="37a1b139d573e87b0bfe6d7ac266ed4c4ff01ba5607e4db6db51140d67764e75cfe7bb0d11f2bdacfcf52b868fbc43517a38172315de3136692cacc719c636d23d48e0ba2f38f0040b907a957d728024d492b1dbaffae1335786c0a99a380d55f3aed7ae1788da38d213d6f4a46483339b8661418e606dd756c4c27dae75e2a6175563962876552a248bdf3b62", 0x8d}, {&(0x7f0000000480)="5a674782cb3751b5ba12365338b63a906fc393727ae7", 0x16}, {&(0x7f0000000800)="6dbfc8fc57ad41369c3841c965254930b5a8293f9d36793445092c2e3a665ee277f8a90932e91b70dbd67afb3bbd750ce422a03ee5320c1a21515eae6f550f059ef5fb78332b206efd8aab814bfc95e49d0cb1e74b69a3a7998a7e103e768545765d39c68a5468f052c06d596cfe9bb3c38e9c914cb0f3bf7ad58bb956087badee03e513cb4daefd36db9f356ebd3485cdffda20ae71032fd455400dd15c73ee60aeddae0a2134860e09569b3681da54e3e43f0646e068e7cc57a63fc8fd016f5f333b", 0xc3}, {&(0x7f0000000900)="54759a7ccb39a196eacd36033fa5b0a256c2bcc4abce592a7151ae8e125bd05538fec3a28e5bd4cf803c796c8bf01289bb6679bd764e367befdfa8b948150539db8b402bbcbad10631dc58c91e6869b487c54bfd6247f11d224b81dbd334e100c2c7057bc3b7671cbb90937453d0bef4deb83008acf0756c20417c511834891025fd6cd73721a52d0db75008f44c01d6de0769492b03ee27ef9fb060", 0x9c}, {&(0x7f00000009c0)="7d1f1b05481769b018b29c6878375f5899d9d111ea8d773caa7cdb9cfaa79a0aec91f9d37ab917050730672c0480b0c62257f3a429c33b0f6d2025d85372e957a1e6c7f52ab21d3efb9943a0077d929858d63848deca84b28cd8c15da6a6f4922f590272b8248c7fd952846c9ab11fb36c3c31a88d", 0x75}, {&(0x7f0000000a40)}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c00000000000000010000000200f8bd7b90d4c33563a1d622000006d06e2ca1631d0f7f526e49ecb5af44145734d511554dc2a1db780a1bc16b398ab6991dc75d665cbcf157b3dcd825b2d908bb75bff3f5ddeb1af5afef46eef5558bf881e7b4b211591231c1e820ef790f0b6d121030e5c40cedea5e4548b84727d97a1490ebbbaa2b7c4cb61cc00293cf87c7d89952490d11c7c724f0a1c0cbc30dd9e8f34b037273ed0f7f68d83871c0a3758b73040288d1e486a057641852e2e54cb573ee1d361388b9068e17484eba95337d334417", @ANYRES32=r11, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x4000}, 0x12) mount$fuse(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuse\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d4f303030303030303030303030303030303132303030302c757365725f69643d3df251f331e9fe648329800738edbd7565bb1c5f7adb2c7f62bb27bc58f25fdfcef816b0c9d781bf62426e4d17534f1e41485a25eb8d16569afd49d4b9a30c4d3dcec0be2e3dd342936827183df54f745aafe3f0eaf3599096a0e790d11c254aafb91115348f14bc0e8750f2648dd811593e748983a03f6f2125c91becdd79f8365a5373e32ceead15e1dc318d15951c32083442b101bb0bd577684d824c645fbbbb77604d1f00fdbf59208c9edda22c9dc951be0a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r14, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,appraise,\x00']) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xdb2, 0x8, 0x357}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@mss, @timestamp, @window={0x3, 0x0, 0x81}], 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = socket$alg(0x26, 0x5, 0x0) bind$alg(r20, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(0xffffffffffffffff, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r21 = epoll_create(0x654) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r21, 0x3, r22, &(0x7f00000002c0)={0x40004008}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x1}) 03:45:55 executing program 0: unshare(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180), 0x4) write$FUSE_WRITE(r0, &(0x7f0000003240)={0x18, 0x0, 0x2, {0x101}}, 0x18) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000600)=""/4096) vmsplice(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000000)="fa3c85d8de3e8ecfbc4a388259aa943f3b1d4344cff8d96b68730baa17bd1e714862f8dde0ba8620d67c6e2126", 0x2d}, {&(0x7f0000000140)}, {&(0x7f0000000040)="c6333fd2dc42bec49b4ae3e30c7272949f604c98953870b4eb1d95ecb6fda5fd3a53ca", 0x23}, {&(0x7f00000004c0)="09f1d4f05fa5453f5426b1e2448dc952d8f00199340020ba323eba91e2691a8a00bd73f2eaa26d4c99abb722ba70c558f2407a0c6ad2c8336186940355809ef90ae9c6a6b7ed98058772", 0x4a}, {&(0x7f0000000540)="c90192051275cd899e52be4156d2d0a81e4a9c1ae27c52327c7dcc219c7d3ffcf9edaab6a257a9ee0901eca11b9599748f9e5b77019887bc64bc35d158b5bb340df50a2c4cfc8cd305a2552273e630ec6daebb4c21f791ecb324b9cb5aecb5b29d77603f7132c00a17795764172c9d26a41bafaf9b78cbb50cd5c7b421eaf3c93073", 0x82}, {&(0x7f0000001600)="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", 0xc00}, {&(0x7f0000002600)="ba474ddd7f4696f60777a1f8ebe0ad2db0cb660f1f8720ded65e0c72ba9bf5b21c02dba94b1f6c124464c7bcf954a7491345e01074ac46e4538ee4343b6df2db275242b3c43baf63523c3f4c564228236b82d43048e2e2ff14e44dd6a85e6ab0109b1b94d8d23bae69e3bd53e6a63f19a5d4fc68e924cb328b564a85080152ac3eb57eb0ecf1e753", 0x88}], 0x7, 0x4) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00RT\xdf`\x88\xd2sw\x00k\x9dY\x1a\xe2Hn\xefZ\x00\x04\x83}\xdd\xec\b\xa2\xa6\x89zf\xf7\x06\x03\xb4J\xcfW\x89y\x89\x96\xde\xf8\xd9\xb1\x01\x9e\x9ex!$\xb9\xbb\x9e\xe8\x87w\xc8\'\x90\\\b\xcf\x96\xc6\x01[\x01\x8fB\xa7$\xde\x00\x9c\xd8\x15\xc3\xd3\xb8\xd0\f\x9cA\xee\x10\xcc\xc6\x0eh\bq\xa3rm\x1e\xbb\x7fU\xc6r\xb2\x84Z\xc5\xce=\xaa\xc2u\x95\x89;\xcf\x13\xf2\xf6\x97\x00'/135) getdents(r1, &(0x7f0000000100)=""/92, 0x54) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x1, 0x80000001, 0x0, 0x8, 0xcaf}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'b!HC\x94\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180), 0x4) write$FUSE_WRITE(r0, &(0x7f0000003240)={0x18, 0x0, 0x2, {0x101}}, 0x18) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000600)=""/4096) vmsplice(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000000)="fa3c85d8de3e8ecfbc4a388259aa943f3b1d4344cff8d96b68730baa17bd1e714862f8dde0ba8620d67c6e2126", 0x2d}, {&(0x7f0000000140)}, {&(0x7f0000000040)="c6333fd2dc42bec49b4ae3e30c7272949f604c98953870b4eb1d95ecb6fda5fd3a53ca", 0x23}, {&(0x7f00000004c0)="09f1d4f05fa5453f5426b1e2448dc952d8f00199340020ba323eba91e2691a8a00bd73f2eaa26d4c99abb722ba70c558f2407a0c6ad2c8336186940355809ef90ae9c6a6b7ed98058772", 0x4a}, {&(0x7f0000000540)="c90192051275cd899e52be4156d2d0a81e4a9c1ae27c52327c7dcc219c7d3ffcf9edaab6a257a9ee0901eca11b9599748f9e5b77019887bc64bc35d158b5bb340df50a2c4cfc8cd305a2552273e630ec6daebb4c21f791ecb324b9cb5aecb5b29d77603f7132c00a17795764172c9d26a41bafaf9b78cbb50cd5c7b421eaf3c93073", 0x82}, {&(0x7f0000001600)="3e14667b4251deb46b4ed952c8d03b61472d2d03e7f31ceb92ab92a332d16ab97c670855804543b97d61e61f7ef56c323c44cd99a910a96f39f792d8e9ae5cc81951ea6be3d0538cefc12fb9ab87b90a7d8fdc581e6c6eec36f1796b66587bfad60061b60fe665aeb231992da7dccffb4a030344ae93783a67636c20513bbbad4757151189f13c3c8d45f1c0b65b937ae22e80b5380de5024251068f00fb5a31882f9d371c9a14ed5c052e88694b5b054146121ce46a0adf49c5f1c58a96a2d40a0e17ac9b3d8484195381d4b968eafaf7695ea653eef632b55dd628c652fe47d29a429bdac9c528e0a49f3c15c6c475d55cb07b0158fad793f24b6ef960502bf0e8215f0b45e2f221f6119a314619e3f51803f14033008dec8be65d3fd23e6a07dc29f5a1ad44e7e5babab72764829f48f0665df3c9950aedbc34c2613cba077c1f28d90b1ca548cf868f28105a6247e5ae3da16889ce8de0ba3727de9a614ffe0834e6cfa0a9e1dbfeaacec18f7e006d518c64cccf2741bcf37200cb1ccedb4589027fade1af2b8970554010b1e101ed9c7ec7f4cd7f068e6636f25aeb5bb435156c3b471b77ff8d430f7a81ea9dc77e21da5459d60ad9454f45a995d41d2339a2cca61f3aeaa9d953aeb76c41843bd9918048daa61f369e9c1c8267be7a5fc78008b1649445c9035d7b20c4e0347a9a0417c067fc654268dc9d8de6cb691c1fc466b168a37390710782eac97061e8b2ac4cde95dc9e97ad560406a55e931670c91ea64762a7e7bdd8f994198cf435fcf4904dae6d07309d9858321767d5b45f5307dfb558e0c1a713604f7211d832d3312cfea1c03e8f3b99b7038853dca15c4c2980f3473d39dcb90dfff819fca97d2b0b1cdaeb8b3c8d6ea1dca02c48fb6775a70daa0f88a4a2a213f0f5374f0b1f1222ac905651e9231c483fee6c79fa52d708629847596fc8be1fe17a13f6d843116d8aa7b607aef106af76d3fde573c8e0d8ea3bbe85bd0bdf7dec8564cf67273de67b399775510c4574fff328eecc92efa3093a17e2ad7b905dd3defb395d8d483541bf4a97871a09ed7b1b1f12bdaa373c335a7be9c247966407d841d1aa6231e04b1b7282bd5562cd0c816c446bf7c958e81c1a61b7ea2f2bbd6e8f598a7fcf6f72953e955c449401c0e717d4c6d03e8f6a177395e7d53dd46df9dbddab110fcf0937b02f74b3f38159afc23cc81af491384383b35f864d33e849a237d2ba603d6ab4f4d429c5c2174dd236840485a720adc91ed371f74725c94022cb91ebced39bd73f1a7661d665742daf3fcb2b47ec2ec9359f2070b244599951b45ea9907971eb66d53a29ffe5fd7bdc63f4e178f83c2b5097e3ac9cd5700551fd52c55544a4b962ff41b17ddf4809543f15f129bc945de9c3ffc2628584b0d429dc6910b697d6b91d7114b283b7be39af6e72fa837c5c374a24cb2a846f66b9e691de848c950a65552f118d3ffadbf5650a4d2fd8ff86061b5b11041a3a4e05a71efd7712338e3b50ff5306b2927be9ef200b8880d407da0798bac0b4c5a11c926ecbe7fef7667cb5fdc472cabb3962f7fc6f77c137acab40a07b35dd4bca11abee7467d32615e11b60b58a54d947dcb8a89bd90685cd5cdb9202bf5730d9c76c80f815f4cf1ad14e700a4f7a3c3116d62be5f3ad89f3b800c189c226d78605e213fd58458eef07c5dab927b5cdad76f311abd3116cb829a0b1f336fede177885e020ed94d228b78c24514e78769d4e4d65c86c63eeb44207a2e3c46dd48058605f2813d64deaaed2e61b0aa174f129cf7cb371724edf3028e52f3393fecbb512f380e0842a3264e53b2b7aa0576c4b2daf71b76fc7548f23600e8f79c55eaa5d8c4834aa1297fb5828a185040d623dd2390da1814c4a71e9cc90b0da908db5467c6940c9401e9e6222a2a83bd0e4b3d93ca6081b5972503ffd94297aa3fc0a0d5a2e4fc2dda92f68960349425eb80f7da2b8cd4fef4076990590e048c368a06738770b4c9cc362b82026037f3e47ae8e3dbf88800b43b0b924addfbd73180ec1e73bb4fce53a222cb4b50b1cd699c2cdfd088f908912a2664b27ed10ff70e449ae71e93dc5608d5365740a83d1159b7c0b87419b5ef0fb28846c7618b99868e038339c073a2dcfb8687949399b84c0248ca614429f828acf42985f643bc6a688790c2ce35eb4b46a52e414310fda2ea9f46b781db07bca4892d701eba6a96a9ef204b55c282a54d0d4deeed783199ebf4eb504c807fb5afa1a8a270ab5e28b193b4ac439580668e2fd7e146899ca3d23b876ecbd267768c22e4c2617a189cb44b7c1329d26bfc880518ad323559961155b89064f48e4c58b799b1d839064602d7a19cb01de2b9176ec0c4373c4ac57c072c1f7df5377cafa73e0dac9205ad91c5a24bd7fe788f9ae7d97789af6d6100b315ffceba9907ac3a7ea9257e6e745b14264dbb5a66a2d031cd67cc657dc288de587786e0b213b1f5625cc3b5d99811c75217c10b52f3f6c33d3e7b349d06f93c52ce125faf22e91422a9f20bfa067d322e4eca331a64764886a4e2d11b2b9b7334d1e999b8755665e89e3f349875f0fc9e2004a456708ee99e0507788f5f6cf665f67a4106b31f6b4984cc358dc7afde7628c52b3b6ce4016252c9bfbdfb207ccadbc1318882f4d11311112334edd30a499fb17f08b5ca4eda8ed7e84edb67ab66e30faf1b5e2298fe004988200f6ee5d8f3418e6443ded2cfe9f2be5cd36993b1b9b184c4f145d079de6d30079f3d42ab38b38fdf1daec9c1b1caaaed43315c2624017f238c8f642a6111b9701e46a398122da95d8f911c7f02cf00ff664e76a0fb4cbf61c043393fd1e3f2ff7436104f1d314316dda5c4559a40a820c27bedbfda1885366e9631912915acb589257ce7929c65f1d1ee2464d4675ba816d64dbb17575b5d30d938c767b4e9df6fc67281d8be3f929dabadb690db508e4046a970a7d5e3a41908c5b0ff80a10f0d52f030366a2d2e023996ffed1e747180006a4fca42bd43d8511d9758a6861a1682c14f9901bc8cdf38232266221ec61f7d29c1cb6ac92bad3ef7cef939428ee8ba97f6cca59244586b7077db887b220bf44a462583c14403f57785308550e71e672e4ff55f31eb43212dc1b06809e3e9cab4b1770b2af66b40839c333be347a19ebd7f50066d7bab8198016ca66b4f9173ff440d06abf5a6372ade474bc556f23df01351092f78893f140d670e2eb87b8b523fcd0278cfc674d3d2023c5655c2882e3997d89114d1466fa92ad8831dc63c3b6cb64d257dae1c6ccd8a42d5c0032b0c8b7671be0e3d62969083dd32ac683e1efa18b9605354830dfa7a46b4e8901798b141b338e79adc35f42c341db7f849a5ce4296195007165c40e1f9087afec22ea91a0d6d21ca20e7b27a39b1b1b599c7933922ca21d34510b1519aba84c71c1b49d66fc139aa96dcfcd661c891fbdf208e710dbc4553c3b4f534010632c1ea7a730b40bf2e280557da5ef0434c179b320a1126d7c4e024343ee2d39ce7c6e4145472e613e0c0aa2b12641b7abebf5d05a07eff11cbae448fa85af4c66abe775ce2959b6affc4890714d1059898b095ffb9c4d5ce20ce59a8e27aa705bde5ce368ae34ce1866e9046959cbd29a9872ebe523b16fc1d943570d0bad448915479d45d8a5f9aa50eca8b7f9c9b423c1e79dbf7d835d38e4166a2688486dca6d2887d2c3b6bd04e0918e8a84b227777648dc772d9d6f9a77dcc7d6f19d8f9a6dd7521485ab897eb3e3b7b30b84d912f513c8d3600656aadfb02f84f7764092178382b904168c557dd70fbb19ca2190adb708cc32fca13da327057dc8d7760c5f4fc1f56f8ae3bbe7efac39213a88296432c3a44c5c894878f359cb070d51a69ced8dadb0bcda3a6fd0346aa50f1a9bc64e0b5dfbf3c11c11fb869145bb69a53794753c25601337a271ebc6b20c616d26f08bd726666df7ee54c0e37aa21fca70feee5f508f6c11141ec1b594a749aef88aa7fad960e435cd6e22c79c18004cb38449e0e58a882a7af3c46ed872623da1543cdd154364540ec2998d2bb51e2447a0e8d2d00f7ae5cbd55640976a33f483224b84a3ea42b96b2eceafae4a1783a0f82b76f4b7aebcaeded7598379ce6bfd318d1e79570263607ab0905838e1d945a5dc803b7be73981091a38c2caa00616f87223449b1cc19eadb7b75f8418ab9126431ce8658a1aeb678747400ab3f690faaba51ed01fe32d4db4bb58b2c23815861d5445232ea5eb866f816ea3286cff3867c040dd5ef76ec1dc498351b8660c8702a8c3f7065cc67fcb53f7614488632a9d5c", 0xc00}, {&(0x7f0000002600)="ba474ddd7f4696f60777a1f8ebe0ad2db0cb660f1f8720ded65e0c72ba9bf5b21c02dba94b1f6c124464c7bcf954a7491345e01074ac46e4538ee4343b6df2db275242b3c43baf63523c3f4c564228236b82d43048e2e2ff14e44dd6a85e6ab0109b1b94d8d23bae69e3bd53e6a63f19a5d4fc68e924cb328b564a85080152ac3eb57eb0ecf1e753", 0x88}], 0x7, 0x4) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00RT\xdf`\x88\xd2sw\x00k\x9dY\x1a\xe2Hn\xefZ\x00\x04\x83}\xdd\xec\b\xa2\xa6\x89zf\xf7\x06\x03\xb4J\xcfW\x89y\x89\x96\xde\xf8\xd9\xb1\x01\x9e\x9ex!$\xb9\xbb\x9e\xe8\x87w\xc8\'\x90\\\b\xcf\x96\xc6\x01[\x01\x8fB\xa7$\xde\x00\x9c\xd8\x15\xc3\xd3\xb8\xd0\f\x9cA\xee\x10\xcc\xc6\x0eh\bq\xa3rm\x1e\xbb\x7fU\xc6r\xb2\x84Z\xc5\xce=\xaa\xc2u\x95\x89;\xcf\x13\xf2\xf6\x97\x00'/135) getdents(r1, &(0x7f0000000100)=""/92, 0x54) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x1, 0x80000001, 0x0, 0x8, 0xcaf}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'b!HC\x94\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:46:04 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:46:04 executing program 4: unshare(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180), 0x4) write$FUSE_WRITE(r0, &(0x7f0000003240)={0x18, 0x0, 0x2, {0x101}}, 0x18) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000600)=""/4096) vmsplice(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000000)="fa3c85d8de3e8ecfbc4a388259aa943f3b1d4344cff8d96b68730baa17bd1e714862f8dde0ba8620d67c6e2126", 0x2d}, {&(0x7f0000000140)}, {&(0x7f0000000040)="c6333fd2dc42bec49b4ae3e30c7272949f604c98953870b4eb1d95ecb6fda5fd3a53ca", 0x23}, {&(0x7f00000004c0)="09f1d4f05fa5453f5426b1e2448dc952d8f00199340020ba323eba91e2691a8a00bd73f2eaa26d4c99abb722ba70c558f2407a0c6ad2c8336186940355809ef90ae9c6a6b7ed98058772", 0x4a}, {&(0x7f0000000540)="c90192051275cd899e52be4156d2d0a81e4a9c1ae27c52327c7dcc219c7d3ffcf9edaab6a257a9ee0901eca11b9599748f9e5b77019887bc64bc35d158b5bb340df50a2c4cfc8cd305a2552273e630ec6daebb4c21f791ecb324b9cb5aecb5b29d77603f7132c00a17795764172c9d26a41bafaf9b78cbb50cd5c7b421eaf3c93073", 0x82}, {&(0x7f0000001600)="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", 0xc00}, {&(0x7f0000002600)="ba474ddd7f4696f60777a1f8ebe0ad2db0cb660f1f8720ded65e0c72ba9bf5b21c02dba94b1f6c124464c7bcf954a7491345e01074ac46e4538ee4343b6df2db275242b3c43baf63523c3f4c564228236b82d43048e2e2ff14e44dd6a85e6ab0109b1b94d8d23bae69e3bd53e6a63f19a5d4fc68e924cb328b564a85080152ac3eb57eb0ecf1e753", 0x88}], 0x7, 0x4) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00RT\xdf`\x88\xd2sw\x00k\x9dY\x1a\xe2Hn\xefZ\x00\x04\x83}\xdd\xec\b\xa2\xa6\x89zf\xf7\x06\x03\xb4J\xcfW\x89y\x89\x96\xde\xf8\xd9\xb1\x01\x9e\x9ex!$\xb9\xbb\x9e\xe8\x87w\xc8\'\x90\\\b\xcf\x96\xc6\x01[\x01\x8fB\xa7$\xde\x00\x9c\xd8\x15\xc3\xd3\xb8\xd0\f\x9cA\xee\x10\xcc\xc6\x0eh\bq\xa3rm\x1e\xbb\x7fU\xc6r\xb2\x84Z\xc5\xce=\xaa\xc2u\x95\x89;\xcf\x13\xf2\xf6\x97\x00'/135) getdents(r1, &(0x7f0000000100)=""/92, 0x54) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x1, 0x80000001, 0x0, 0x8, 0xcaf}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'b!HC\x94\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180), 0x4) write$FUSE_WRITE(r0, &(0x7f0000003240)={0x18, 0x0, 0x2, {0x101}}, 0x18) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000600)=""/4096) vmsplice(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000000)="fa3c85d8de3e8ecfbc4a388259aa943f3b1d4344cff8d96b68730baa17bd1e714862f8dde0ba8620d67c6e2126", 0x2d}, {&(0x7f0000000140)}, {&(0x7f0000000040)="c6333fd2dc42bec49b4ae3e30c7272949f604c98953870b4eb1d95ecb6fda5fd3a53ca", 0x23}, {&(0x7f00000004c0)="09f1d4f05fa5453f5426b1e2448dc952d8f00199340020ba323eba91e2691a8a00bd73f2eaa26d4c99abb722ba70c558f2407a0c6ad2c8336186940355809ef90ae9c6a6b7ed98058772", 0x4a}, {&(0x7f0000000540)="c90192051275cd899e52be4156d2d0a81e4a9c1ae27c52327c7dcc219c7d3ffcf9edaab6a257a9ee0901eca11b9599748f9e5b77019887bc64bc35d158b5bb340df50a2c4cfc8cd305a2552273e630ec6daebb4c21f791ecb324b9cb5aecb5b29d77603f7132c00a17795764172c9d26a41bafaf9b78cbb50cd5c7b421eaf3c93073", 0x82}, {&(0x7f0000001600)="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", 0xc00}, {&(0x7f0000002600)="ba474ddd7f4696f60777a1f8ebe0ad2db0cb660f1f8720ded65e0c72ba9bf5b21c02dba94b1f6c124464c7bcf954a7491345e01074ac46e4538ee4343b6df2db275242b3c43baf63523c3f4c564228236b82d43048e2e2ff14e44dd6a85e6ab0109b1b94d8d23bae69e3bd53e6a63f19a5d4fc68e924cb328b564a85080152ac3eb57eb0ecf1e753", 0x88}], 0x7, 0x4) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000480)={0xa4}) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00RT\xdf`\x88\xd2sw\x00k\x9dY\x1a\xe2Hn\xefZ\x00\x04\x83}\xdd\xec\b\xa2\xa6\x89zf\xf7\x06\x03\xb4J\xcfW\x89y\x89\x96\xde\xf8\xd9\xb1\x01\x9e\x9ex!$\xb9\xbb\x9e\xe8\x87w\xc8\'\x90\\\b\xcf\x96\xc6\x01[\x01\x8fB\xa7$\xde\x00\x9c\xd8\x15\xc3\xd3\xb8\xd0\f\x9cA\xee\x10\xcc\xc6\x0eh\bq\xa3rm\x1e\xbb\x7fU\xc6r\xb2\x84Z\xc5\xce=\xaa\xc2u\x95\x89;\xcf\x13\xf2\xf6\x97\x00'/135) getdents(r1, &(0x7f0000000100)=""/92, 0x54) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x1, 0x80000001, 0x0, 0x8, 0xcaf}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000000c0)={'b!HC\x94\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @local}, 0x1c, 0x0}, 0x0) 03:46:05 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) flock(r0, 0x0) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = gettid() dup2(r0, r1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) 03:46:05 executing program 0: [ 1199.992323][ C0] net_ratelimit: 32 callbacks suppressed [ 1199.998031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.003830][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.162481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.168270][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.312344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.318122][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.112396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.118234][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.192376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.198181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.272347][ C1] net_ratelimit: 28 callbacks suppressed [ 1205.278075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.283853][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.352352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.358165][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.992353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.998120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.003914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.009629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.072372][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.078138][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:46:15 executing program 4: 03:46:15 executing program 2: 03:46:15 executing program 0: 03:46:15 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:46:15 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:46:15 executing program 2: 03:46:15 executing program 0: 03:46:15 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:46:15 executing program 4: 03:46:15 executing program 2: 03:46:15 executing program 0: [ 1210.392335][ C0] net_ratelimit: 32 callbacks suppressed [ 1210.392343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.403782][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.552359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.558141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.722347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.728263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.512343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.518215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.592372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.598175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1215.672366][ C1] net_ratelimit: 28 callbacks suppressed [ 1215.678041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1215.683803][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1215.752392][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1215.758191][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.392356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.398115][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.403887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.409647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.472399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.478158][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:25 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:46:25 executing program 4: 03:46:25 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:46:25 executing program 2: 03:46:25 executing program 0: 03:46:25 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 03:46:25 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:46:25 executing program 4: 03:46:25 executing program 2: 03:46:25 executing program 0: 03:46:25 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 03:46:25 executing program 4: [ 1220.792324][ C0] net_ratelimit: 32 callbacks suppressed [ 1220.792349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1220.803874][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1220.962335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1220.968142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.122338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.128115][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.912468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.918316][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.992348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.998139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.072342][ C1] net_ratelimit: 28 callbacks suppressed [ 1226.072356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.083858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.152346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.158145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.792352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.798180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.803993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.809745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.872367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.878168][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {0x0}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:46:35 executing program 2: 03:46:35 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 03:46:35 executing program 0: 03:46:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:46:35 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:46:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:46:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c00010062726964676500001400020008000500e8ff0000080001005cc20000"], 0x44}}, 0x0) 03:46:35 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x57ae}) 03:46:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:46:35 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001480)) 03:46:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) [ 1231.192329][ C0] net_ratelimit: 32 callbacks suppressed [ 1231.192342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.203831][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.352320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.358172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.522467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.528283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.312330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.318144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.392431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.398230][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1236.472339][ C1] net_ratelimit: 28 callbacks suppressed [ 1236.472369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1236.483810][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1236.552352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1236.558191][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.192337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.198112][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.203910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.209650][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.272351][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.278140][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {0x0}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:46:45 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x57ae}) 03:46:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:46:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000180)=""/139, 0x8b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) 03:46:45 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000140)) r2 = gettid() tkill(r2, 0x16) 03:46:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:46:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)) 03:46:46 executing program 2: 03:46:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:46:46 executing program 0: 03:46:46 executing program 2: 03:46:46 executing program 0: [ 1241.592344][ C0] net_ratelimit: 32 callbacks suppressed [ 1241.598014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.603768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.752348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.758130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.912334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.918147][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1242.712390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.718211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1242.792359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.798160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.872354][ C1] net_ratelimit: 28 callbacks suppressed [ 1246.872362][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.883841][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.952357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.958148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.592308][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.598108][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.603898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.609647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.672361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.678140][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:56 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {0x0}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:46:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:46:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000180), 0x4) 03:46:56 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2386c9c6c22e69c499300eb5d05b636ed1562fdc12f511d538029f386a2d6a37660840100ec76d12a0af5b529660e9655756ebfeaf81bd772c0e994ac288aa1a1aecc54f5ad6cdde1adae72937505b8e845ebae3b6f7"], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) r1 = eventfd(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1a000) close(r0) 03:46:56 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:46:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:46:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:46:56 executing program 2: 03:46:56 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:46:56 executing program 0: 03:46:56 executing program 2: 03:46:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x7b) lseek(0xffffffffffffffff, 0x1, 0x1) [ 1251.992330][ C0] net_ratelimit: 32 callbacks suppressed [ 1251.992359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.003805][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1252.152379][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.158172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1252.312325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.318116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.112335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.118126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.192342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.198158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.272377][ C1] net_ratelimit: 28 callbacks suppressed [ 1257.272390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.283785][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.352357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.358153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.992343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.998144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.003916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.009688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.072365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.078171][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:06 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:47:06 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:47:06 executing program 0: 03:47:06 executing program 2: 03:47:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x7b) lseek(0xffffffffffffffff, 0x1, 0x1) 03:47:06 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:06 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:06 executing program 0: 03:47:06 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) 03:47:06 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:47:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x7b) lseek(0xffffffffffffffff, 0x1, 0x1) 03:47:06 executing program 0: [ 1262.392365][ C0] net_ratelimit: 32 callbacks suppressed [ 1262.392376][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.403840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.552352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.558171][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.712352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.718197][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.512381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.518187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.592355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.598208][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.672371][ C1] net_ratelimit: 28 callbacks suppressed [ 1267.672390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.683798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.752339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.758170][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.392353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.398171][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.403968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.409723][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.472366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.478136][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:47:16 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:16 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:16 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:47:16 executing program 2: 03:47:16 executing program 0: 03:47:16 executing program 0: 03:47:16 executing program 2: 03:47:16 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:16 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:16 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)) r1 = gettid() tkill(r1, 0x16) 03:47:16 executing program 2: [ 1272.792351][ C0] net_ratelimit: 32 callbacks suppressed [ 1272.798016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1272.803821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1272.952359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1272.958132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.112588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.118427][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.912368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.918155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.992338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.998107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.072328][ C1] net_ratelimit: 28 callbacks suppressed [ 1278.072337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.083792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.152416][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.158214][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.792338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.798187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.804040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.809830][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.872366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.878159][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:26 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:47:26 executing program 0: 03:47:26 executing program 2: 03:47:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:26 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) r2 = gettid() tkill(r2, 0x16) 03:47:26 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:26 executing program 0: 03:47:26 executing program 2: 03:47:26 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:27 executing program 2: 03:47:27 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000000), 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000e2f66696c654800"], 0x10) shutdown(r0, 0x2) [ 1283.192346][ C0] net_ratelimit: 32 callbacks suppressed [ 1283.192375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.203845][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.354279][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.360135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.512349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.518138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.312336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.318092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.392376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.398168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1288.472751][ C1] net_ratelimit: 28 callbacks suppressed [ 1288.472763][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1288.484203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1288.552417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1288.558203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.192329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.198096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.203872][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.209618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.272460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.278235][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:47:37 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:37 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2020231, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) r1 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000002040)=""/4096) 03:47:37 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) fchmod(r0, 0x25) 03:47:37 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) gettid() tkill(0x0, 0x16) 03:47:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:37 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = add_key(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 03:47:37 executing program 4: mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:37 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 03:47:37 executing program 4: mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:37 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs(0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) [ 1293.593142][ C0] net_ratelimit: 32 callbacks suppressed [ 1293.598855][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1293.604663][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1293.752328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1293.758123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1293.912320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1293.918119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1294.712351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.718140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1294.792344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.798185][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1298.872357][ C1] net_ratelimit: 28 callbacks suppressed [ 1298.872365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1298.883791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1298.952346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1298.958163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.592331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.598131][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.603897][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.609655][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.672386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.678204][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:47:47 executing program 0: 03:47:47 executing program 4: mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:47 executing program 2: 03:47:47 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) gettid() tkill(0x0, 0x16) 03:47:47 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:47 executing program 0: 03:47:47 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:47 executing program 2: 03:47:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:47:47 executing program 0: 03:47:47 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:47 executing program 2: 03:47:47 executing program 0: mlockall(0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) 03:47:47 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894c, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:47:48 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) gettid() tkill(0x0, 0x16) 03:47:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002b008163e45ae087000003010d0f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 03:47:48 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:48 executing program 2: r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894c, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') [ 1303.992348][ C0] net_ratelimit: 32 callbacks suppressed [ 1303.998024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1304.003808][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1304.152342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1304.158144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1304.312332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1304.318116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.112366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.118126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.192356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.198115][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1309.272357][ C1] net_ratelimit: 28 callbacks suppressed [ 1309.272369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1309.283866][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1309.352375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1309.358187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1309.992358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1309.998125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.003910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.009691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.072456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.078391][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:47:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 03:47:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:58 executing program 2: r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894c, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:47:58 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:47:58 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) r2 = gettid() tkill(r2, 0x0) 03:47:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:58 executing program 2: r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894c, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:47:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:58 executing program 2: r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894c, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:47:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:47:58 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x7, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f5b0ffb83a83e65611b8e66182eff039800ccce5b3c9e6dd2af872a1cb21492f8816f1aa5319e87f29738ad944b2034440a"}, 0x68) [ 1311.821367][ T6330] dlm: no locking on control device [ 1314.392376][ C0] net_ratelimit: 32 callbacks suppressed [ 1314.398050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1314.403829][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1314.552357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1314.558164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1314.712341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1314.718116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.512371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.518166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.592363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.598160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1319.672366][ C1] net_ratelimit: 28 callbacks suppressed [ 1319.672374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1319.683792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1319.752342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1319.758185][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.392371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.398173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.403955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.409687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.472360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.478112][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:48:08 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:08 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:48:08 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) r2 = gettid() tkill(r2, 0x0) 03:48:08 executing program 2: 03:48:08 executing program 0: 03:48:08 executing program 2: 03:48:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x215}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x401, @remote, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc05812fe, &(0x7f00000004c0)={0x53, 0x0, 0x168d, 0x0, [0x0, 0x8370000]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)=ANY=[]) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, 0x0, 0xedc0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00004e7c6ce33adc00ffffffff0000000008000100683df9001c00020018000204030000004f1f69ff3073cce77422f49ff917d45e9d28987a735d6e8c9b242d890fda70d7186b120ad6c7c01a42a0531140449a387c8eeab3d3606f29ac74fcadbbe72ae4a8f2ec814bdd797e9990788e2a6878bd9b4283ffad9b3be8c23ec9a3055b453a537a91ab89b61df2494852f4fb8dc3e2ed993af1046684d001a771de5ba409b3f98dd29f2910ab649d"], 0x3}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 03:48:08 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c0000000000000000000000ffff0000c608855755945c0000fd44f277cbdcd7de1648a48afc85340da9a71f451fa48dbaf38a13504b39e4682b835ac5d8aad7311733ea017f6a1ff387af61d223865daf2dcab65c67ad085a368847981d81df3f817bb7a5dcfedd08164a070f89e0fcc65a3d0f4f1d0872e81c2b332ccdf6c7e1dbdf8198028e7c433cf29e46e111c72ca2b4ec6ab124f589477d590c3d596ea2b82d7d5fec9738d96812f5af88041cbc972c9f8593de6082f69cdd19074b7b27153c3e622f906d06f157d4d4bc72dacef858e93288994f5d47c9"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') [ 1321.496678][ T6355] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 03:48:08 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r0, r0, 0x0, 0x40040005) io_setup(0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1324.792348][ C0] net_ratelimit: 32 callbacks suppressed [ 1324.798180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1324.803969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1324.952406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1324.958190][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1325.112385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.118170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1325.912375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.918135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1325.992462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.998263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1330.072341][ C1] net_ratelimit: 28 callbacks suppressed [ 1330.078064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1330.083866][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1330.152354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1330.158149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1330.792326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1330.798089][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1330.803827][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1330.809573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1330.872365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1330.878135][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:18 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:48:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c0000000000000000000000ffff0000c608855755945c0000fd44f277cbdcd7de1648a48afc85340da9a71f451fa48dbaf38a13504b39e4682b835ac5d8aad7311733ea017f6a1ff387af61d223865daf2dcab65c67ad085a368847981d81df3f817bb7a5dcfedd08164a070f89e0fcc65a3d0f4f1d0872e81c2b332ccdf6c7e1dbdf8198028e7c433cf29e46e111c72ca2b4ec6ab124f589477d590c3d596ea2b82d7d5fec9738d96812f5af88041cbc972c9f8593de6082f69cdd19074b7b27153c3e622f906d06f157d4d4bc72dacef858e93288994f5d47c9"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') 03:48:18 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:18 executing program 0: 03:48:18 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:48:18 executing program 3: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r1+10000000}, 0x0) r2 = gettid() tkill(r2, 0x0) [ 1331.454803][ T6377] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 03:48:18 executing program 0: 03:48:18 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:18 executing program 2: 03:48:18 executing program 0: 03:48:19 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:19 executing program 2: [ 1335.192338][ C0] net_ratelimit: 32 callbacks suppressed [ 1335.198013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1335.203787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1335.352348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1335.358150][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1335.512346][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1335.518159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.312339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.318145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.392348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.398157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1340.472342][ C1] net_ratelimit: 28 callbacks suppressed [ 1340.478017][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.483775][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1340.552347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.558163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.192374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.198184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.203959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.209683][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.272409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.278163][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:28 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {0x0}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:48:28 executing program 0: 03:48:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0) 03:48:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:28 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:48:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x7f, 0x40, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x9}, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x0, 'memory'}, {0x0, 'memory'}, {0x2b, 'io'}]}, 0x19) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x400040001, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x0, '\x03\x8a\xa1t\xe3\xc4\x94u\xb5m\x1b\x88\xa8\xa4ueX\x81\x80', 0x60}]}, 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) socket$kcm(0x2, 0x1000000000000002, 0x0) 03:48:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x02\xfb8', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) keyctl$describe(0x6, r1, 0x0, 0x0) 03:48:29 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000001c0)) 03:48:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) [ 1341.832098][ T6402] device nr0 entered promiscuous mode 03:48:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil], 0x0, 0x0, 0x0) 03:48:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:48:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) [ 1345.592343][ C0] net_ratelimit: 32 callbacks suppressed [ 1345.598037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1345.603809][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1345.752361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1345.758188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1345.912352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1345.918145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.712357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.718177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.792354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.798155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.872373][ C1] net_ratelimit: 28 callbacks suppressed [ 1350.878050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1350.883799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.952361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1350.958153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.592341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.598204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.603982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.609761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.672369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.678184][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:39 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {0x0}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:48:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x7f, 0x40, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x9}, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x0, 'memory'}, {0x0, 'memory'}, {0x2b, 'io'}]}, 0x19) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x400040001, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x0, '\x03\x8a\xa1t\xe3\xc4\x94u\xb5m\x1b\x88\xa8\xa4ueX\x81\x80', 0x60}]}, 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) socket$kcm(0x2, 0x1000000000000002, 0x0) 03:48:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x1) 03:48:39 executing program 0: 03:48:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:48:39 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:48:39 executing program 0: 03:48:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:48:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:48:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) [ 1352.259196][ T6443] device nr0 entered promiscuous mode 03:48:39 executing program 0: 03:48:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) [ 1355.992336][ C0] net_ratelimit: 32 callbacks suppressed [ 1355.998011][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.003787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.152328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.158141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.312335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.318118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.112329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.118153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.192339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.198097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1361.272337][ C1] net_ratelimit: 28 callbacks suppressed [ 1361.272351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1361.283805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1361.352379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1361.358298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1361.992349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1361.998179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.003994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.009728][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:49 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/37, 0x25}, {0x0}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:48:49 executing program 3: 03:48:49 executing program 0: 03:48:49 executing program 2: 03:48:49 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(0xffffffffffffffff, 0x1, 0x1) 03:48:49 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) [ 1362.072373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.078166][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:49 executing program 3: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x100) rmdir(&(0x7f00000000c0)='./control\x00') 03:48:49 executing program 2: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x100) rmdir(&(0x7f00000000c0)='./control\x00') 03:48:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x41000000000004}) 03:48:49 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(0xffffffffffffffff, 0x1, 0x1) 03:48:49 executing program 3: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x100) rmdir(&(0x7f00000000c0)='./control\x00') 03:48:49 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(0xffffffffffffffff, 0x1, 0x1) [ 1366.392346][ C0] net_ratelimit: 32 callbacks suppressed [ 1366.392361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1366.403790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1366.552357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1366.558160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1366.712341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1366.718137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.512339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.518125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.592334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.598172][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1371.672369][ C1] net_ratelimit: 28 callbacks suppressed [ 1371.678058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1371.683888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1371.752368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1371.758196][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:48:59 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:48:59 executing program 2: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() socket(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x100) rmdir(&(0x7f00000000c0)='./control\x00') 03:48:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x41000000000004}) 03:48:59 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x0, 0x1) 03:48:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) clock_settime(0x0, &(0x7f0000000140)={r0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 03:48:59 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) [ 1372.402598][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.408821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1372.414860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.420859][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:59 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:48:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) 03:48:59 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x0, 0x1) [ 1372.472322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.478150][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:59 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='mem\x00\x01y/\x06\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xe3\xfare\x8a\x89n', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 03:48:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:48:59 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) [ 1376.792343][ C0] net_ratelimit: 32 callbacks suppressed [ 1376.792351][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1376.803732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1376.952352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1376.958159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.112339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.118098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.912364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.918165][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.992376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.998178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.072420][ C1] net_ratelimit: 28 callbacks suppressed [ 1382.072434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.083859][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.152331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.158140][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:49:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x0, 0x1) 03:49:09 executing program 2: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() socket(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x100) rmdir(&(0x7f00000000c0)='./control\x00') 03:49:09 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:49:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)={'filter\x00', 0x4, "71f162be"}, &(0x7f0000000280)=0x28) 03:49:09 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:49:09 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='mem\x00\x01y/\x06\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xe3\xfare\x8a\x89n', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 03:49:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 03:49:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x0) 03:49:09 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:49:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x0) 03:49:09 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='mem\x00\x01y/\x06\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xe3\xfare\x8a\x89n', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 1382.792355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.798185][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1382.803995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.809726][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:49:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x7f, 0x40, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x0, 'memory'}, {0x0, 'memory'}, {0x2b, 'io'}]}, 0x19) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x400040001, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x0, '\x03\x8a\xa1t\xe3\xc4\x94u\xb5m\x1b\x88\xa8\xa4ueX\x81\x80', 0x60}]}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) socket$kcm(0x2, 0x1000000000000002, 0x0) [ 1382.872317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.878120][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:49:09 executing program 3: 03:49:09 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) [ 1387.192344][ C0] net_ratelimit: 32 callbacks suppressed [ 1387.198046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1387.203808][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1387.352354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1387.358190][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1387.512318][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1387.518092][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.312379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.318189][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.392368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.398183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1392.472375][ C1] net_ratelimit: 28 callbacks suppressed [ 1392.478056][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1392.483827][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1392.552352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1392.558156][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:49:19 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7) 03:49:19 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x7b) lseek(r0, 0x1, 0x0) 03:49:19 executing program 3: 03:49:19 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:49:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x7f, 0x40, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x0, 'memory'}, {0x0, 'memory'}, {0x2b, 'io'}]}, 0x19) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x400040001, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x0, '\x03\x8a\xa1t\xe3\xc4\x94u\xb5m\x1b\x88\xa8\xa4ueX\x81\x80', 0x60}]}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) socket$kcm(0x2, 0x1000000000000002, 0x0) 03:49:19 executing program 0: 03:49:19 executing program 0: 03:49:19 executing program 4: 03:49:19 executing program 3: 03:49:19 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0xffff]) 03:49:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x320f) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20080040) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffa888, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154006008178a800160004000100e558f000000001000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb53b409d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0xb6, 0x0, "cea7eaa991841a3169e3c1ac31fc83cb951edda9e3b8740734f4b20d869cd66fb15c49aea99ee3a5be4b4b05111bc7851920988186eabb9bdfbd8e375b2d7114e9ac00fc8af082081ee605940e8124b0"}, 0xd8) 03:49:19 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x319) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) [ 1393.181227][ T6570] device nr0 entered promiscuous mode [ 1393.192296][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.198098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.203918][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.209689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.272350][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.278158][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.460273][ T6591] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1397.592397][ C0] net_ratelimit: 32 callbacks suppressed [ 1397.592405][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1397.604003][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1397.752354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1397.758164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1397.912336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1397.918147][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.712342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.718139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.792345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.798142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1402.872383][ C1] net_ratelimit: 28 callbacks suppressed [ 1402.878060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1402.883812][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1402.952348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1402.958121][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:49:29 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:49:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) socket(0x0, 0x80a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x319) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 03:49:29 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x319) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 03:49:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x320f) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20080040) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffa888, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154006008178a800160004000100e558f000000001000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb53b409d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0xb6, 0x0, "cea7eaa991841a3169e3c1ac31fc83cb951edda9e3b8740734f4b20d869cd66fb15c49aea99ee3a5be4b4b05111bc7851920988186eabb9bdfbd8e375b2d7114e9ac00fc8af082081ee605940e8124b0"}, 0xd8) 03:49:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1, 0x79, "03d854bf68e791bfefe5706bd86ccfa06d2a24daf11a66415a705509625e11b0981e642e06ee4d98b8dacaef87e3281f85972d315e6c14ff68dd593cdec962243f0a292d8c6881fdafad6417b2f90e0ad6a9e18c925ae137ca3bf8b871323c5a95fed8c2f0b731df75126e98ff36bc8edc383d8f7e44c9f84f"}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) write$apparmor_exec(r1, &(0x7f0000000380)={'exec ', 'bcsf0\x00'}, 0xb) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x21}, 0x8}, 0x1c) fcntl$setpipe(r7, 0x407, 0x200006) mkdirat(r6, &(0x7f00000002c0)='./file0\x00', 0x22) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x3, @empty, 0x1}, {0xa, 0x4e22, 0xe12f, @loopback, 0x8}, 0x2, [0x7, 0x6, 0x4, 0x0, 0x0, 0x6, 0x3, 0x6b9c3892]}, 0x5c) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x40000008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @local}, {0x0, @random="52c8849ea2a4"}, 0x1a, {0x2, 0x0, @empty}, 'bcsf0\x00'}) 03:49:29 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:49:29 executing program 3: ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) 03:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1403.243022][ T6602] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1403.340224][ T6628] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:49:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') memfd_create(&(0x7f0000000000)='trusted\x00', 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x29) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window, @mss, @sack_perm, @mss, @window, @window, @sack_perm, @timestamp], 0x8) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r3, 0x0, 0x0) 03:49:29 executing program 3: ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) 03:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1403.541674][ T6638] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:49:30 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x10009000, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00\xbd|NL#m\t\xcc\x99\xe3\xb0Cz\xd7\xed\x8a\xd6\xe0]\xa5;\x8dw\xeb\xa0\xa4_\xc33\x95\xf4]\xae\vc\xfc\x14B\xc9\xb7\xf9\b[\xb6\xc28UqttEj\f9\xba\xc3?\xb45\xeb\x16w\xcd\xa0\xec3\xea@\xe1i\xe7\x87\x91r*\xdf\'A\x9d\xac\xd0`p\t\x00\xc6B\xfb\xaaDs\x1b\xd5G\xaet]4$\x89a@k\xe9\xf2\x05\'e_1\x02|\xc2\xf6B\x8d\xf4\xa7\x83\xc5\x1a\x14\xb2PRx\xdb] \xad\xe1\xf9c\xa5\xd2\\Xs\xe5H\xc7\xd6\xa3\xcdU\xcc!\xf8\xaf\xd8\xa9\x15\xa82\x83\b\x99\xdd\x9cK\x02t\xb2\\\xb6\x9bq\xab\xe6H\xb1\xaf\xd6l\x80-\xbe\x83%u\xfe\xf8/\x86\xcc\xb4R\t\xa1\xfe\f\xcf\xb3\x9edF\xb0\xff\xce\x80U\x1c\x92\xb1\xef\xb9In\xd1R\xf4\xb2\xf1\xff\x17\xedJ}\x1d\xfe\xdf\xdd\xbb;1\x9e\xf9U\x84\xbe\x1e\xabQ\xf7\x9b\xb1\xf9\xeb\xa8\xc4\xcf\x9d\xab\xf7==\x00\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1403.592325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.598169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.603975][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.609741][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.672365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.678166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1407.992318][ C0] net_ratelimit: 32 callbacks suppressed [ 1407.998024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.003796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1408.152353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.158204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1408.312333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.318105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1409.112364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.118156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1409.192365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.198165][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:49:39 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:49:39 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:49:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:49:39 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) 03:49:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:49:39 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x10009000, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00\xbd|NL#m\t\xcc\x99\xe3\xb0Cz\xd7\xed\x8a\xd6\xe0]\xa5;\x8dw\xeb\xa0\xa4_\xc33\x95\xf4]\xae\vc\xfc\x14B\xc9\xb7\xf9\b[\xb6\xc28UqttEj\f9\xba\xc3?\xb45\xeb\x16w\xcd\xa0\xec3\xea@\xe1i\xe7\x87\x91r*\xdf\'A\x9d\xac\xd0`p\t\x00\xc6B\xfb\xaaDs\x1b\xd5G\xaet]4$\x89a@k\xe9\xf2\x05\'e_1\x02|\xc2\xf6B\x8d\xf4\xa7\x83\xc5\x1a\x14\xb2PRx\xdb] \xad\xe1\xf9c\xa5\xd2\\Xs\xe5H\xc7\xd6\xa3\xcdU\xcc!\xf8\xaf\xd8\xa9\x15\xa82\x83\b\x99\xdd\x9cK\x02t\xb2\\\xb6\x9bq\xab\xe6H\xb1\xaf\xd6l\x80-\xbe\x83%u\xfe\xf8/\x86\xcc\xb4R\t\xa1\xfe\f\xcf\xb3\x9edF\xb0\xff\xce\x80U\x1c\x92\xb1\xef\xb9In\xd1R\xf4\xb2\xf1\xff\x17\xedJ}\x1d\xfe\xdf\xdd\xbb;1\x9e\xf9U\x84\xbe\x1e\xabQ\xf7\x9b\xb1\xf9\xeb\xa8\xc4\xcf\x9d\xab\xf7==\x00\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1413.272354][ C1] net_ratelimit: 28 callbacks suppressed [ 1413.272366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1413.283811][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1413.352335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1413.358159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1413.369021][ T6650] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:49:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 03:49:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:49:40 executing program 3: [ 1413.637719][ T6670] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:49:40 executing program 2: 03:49:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:49:40 executing program 3: [ 1414.002320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.008722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.014556][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.020291][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.072354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.078149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1418.392367][ C0] net_ratelimit: 32 callbacks suppressed [ 1418.398082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1418.403857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1418.552401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1418.558198][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1418.712338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1418.718130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.512350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.518153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.592324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.598149][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:49:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) clock_gettime(0x0, &(0x7f0000000580)) readv(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x8) 03:49:50 executing program 2: 03:49:50 executing program 3: 03:49:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:49:50 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x10009000, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00\xbd|NL#m\t\xcc\x99\xe3\xb0Cz\xd7\xed\x8a\xd6\xe0]\xa5;\x8dw\xeb\xa0\xa4_\xc33\x95\xf4]\xae\vc\xfc\x14B\xc9\xb7\xf9\b[\xb6\xc28UqttEj\f9\xba\xc3?\xb45\xeb\x16w\xcd\xa0\xec3\xea@\xe1i\xe7\x87\x91r*\xdf\'A\x9d\xac\xd0`p\t\x00\xc6B\xfb\xaaDs\x1b\xd5G\xaet]4$\x89a@k\xe9\xf2\x05\'e_1\x02|\xc2\xf6B\x8d\xf4\xa7\x83\xc5\x1a\x14\xb2PRx\xdb] \xad\xe1\xf9c\xa5\xd2\\Xs\xe5H\xc7\xd6\xa3\xcdU\xcc!\xf8\xaf\xd8\xa9\x15\xa82\x83\b\x99\xdd\x9cK\x02t\xb2\\\xb6\x9bq\xab\xe6H\xb1\xaf\xd6l\x80-\xbe\x83%u\xfe\xf8/\x86\xcc\xb4R\t\xa1\xfe\f\xcf\xb3\x9edF\xb0\xff\xce\x80U\x1c\x92\xb1\xef\xb9In\xd1R\xf4\xb2\xf1\xff\x17\xedJ}\x1d\xfe\xdf\xdd\xbb;1\x9e\xf9U\x84\xbe\x1e\xabQ\xf7\x9b\xb1\xf9\xeb\xa8\xc4\xcf\x9d\xab\xf7==\x00\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:49:50 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) 03:49:50 executing program 3: 03:49:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:49:50 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) [ 1423.672319][ C1] net_ratelimit: 28 callbacks suppressed [ 1423.672331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1423.683791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1423.752350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1423.758212][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:49:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 03:49:50 executing program 2: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xc048ae65, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x4000000000000f4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 03:49:50 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1424.095275][ T6711] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1424.392330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.398151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.403930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.409701][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.472338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.478149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1428.792354][ C0] net_ratelimit: 32 callbacks suppressed [ 1428.798028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1428.803821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1428.952375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1428.958188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.112356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.118142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.912367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.918184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.992348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.998147][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:50:00 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:00 executing program 2: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xc048ae65, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x4000000000000f4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 03:50:00 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 03:50:00 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) 03:50:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 03:50:00 executing program 5: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x20008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0x80000000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1433.816824][ T6723] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1433.848721][ T26] audit: type=1804 audit(2000001000.389:138): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/826/bus" dev="sda1" ino=16682 res=1 [ 1433.932541][ T26] audit: type=1804 audit(2000001000.459:139): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/826/bus" dev="sda1" ino=16682 res=1 03:50:00 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:00 executing program 5: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x20008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0x80000000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:50:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) open(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x80000000, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 03:50:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xcdb5819bc514959b) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) clock_gettime(0x4, &(0x7f0000000040)={0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {r5}, 0x7f, 0x5}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x1, 0x24b, 0x0) [ 1434.072303][ C1] net_ratelimit: 28 callbacks suppressed [ 1434.072315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.083798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1434.104846][ T6742] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1434.152313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.158139][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:50:00 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1434.208927][ T26] audit: type=1804 audit(2000001000.749:140): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/827/bus" dev="sda1" ino=16670 res=1 03:50:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 1434.307674][ T6751] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:00 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xcdb5819bc514959b) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r3, r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) clock_gettime(0x4, &(0x7f0000000040)={0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {r5}, 0x7f, 0x5}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x1, 0x24b, 0x0) [ 1434.502472][ T6760] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 03:50:01 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xb) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) 03:50:01 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) open(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x80000000, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 03:50:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) 03:50:01 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) [ 1434.792319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.798129][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1434.803960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.809730][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1434.832757][ T6771] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1434.872928][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1434.879346][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, &(0x7f0000000100), 0xffba) 03:50:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 03:50:01 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 03:50:01 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x15, &(0x7f0000000100), 0xffba) 03:50:01 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x401, @remote, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 03:50:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x511a80, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x100, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xc6e3, 0x10000) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) umount2(&(0x7f0000000100)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='IPVS\x00') pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) [ 1435.223682][ T6796] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c0000000000000000000000ffff0000c608855755945c0000fd44f277cbdcd7de1648a48afc85340da9a71f451fa48dbaf38a13504b39e4682b835ac5d8aad7311733ea017f6a1ff387af61d223865daf2dcab65c67ad085a368847981d81df3f817bb7a5dcfedd08164a070f89e0fcc65a3d0f4f1d0872e81c2b332ccdf6c7e1dbdf8198028e7c433cf29e46e111c72ca2b4ec6ab124f589477d590c3d596ea2b82d7d5fec9738d96812f5af88041cbc972c9f8593de6082f69cdd19074b7b27153c3e622f906d06f157d4d4bc72dacef858e93288994f5d47c9"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x1b') 03:50:01 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1435.407409][ T6805] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 03:50:02 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) flock(r0, 0x2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1000000000015) [ 1435.533688][ T6812] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x401, @remote, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 03:50:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x511a80, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x100, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xc6e3, 0x10000) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) umount2(&(0x7f0000000100)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='IPVS\x00') pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 03:50:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1435.682949][ T6805] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 03:50:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100), 0xffba) [ 1435.792124][ T6824] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:02 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 03:50:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c0000000000000000000000ffff0000c608855755945c0000fd44f277cbdcd7de1648a48afc85340da9a71f451fa48dbaf38a13504b39e4682b835ac5d8aad7311733ea017f6a1ff387af61d223865daf2dcab65c67ad085a368847981d81df3f817bb7a5dcfedd08164a070f89e0fcc65a3d0f4f1d0872e81c2b332ccdf6c7e1dbdf8198028e7c433cf29e46e111c72ca2b4ec6ab124f589477d590c3d596ea2b82d7d5fec9738d96812f5af88041cbc972c9f8593de6082f69cdd19074b7b27153c3e622f906d06f157d4d4bc72dacef858e93288994f5d47c9"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x1b') 03:50:02 executing program 5: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = gettid() dup2(0xffffffffffffffff, r0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 03:50:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x401, @remote, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 03:50:02 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) [ 1436.032709][ T6834] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 1436.068394][ T6838] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:02 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:50:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100), 0xffba) 03:50:02 executing program 2: [ 1436.388233][ T6852] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:03 executing program 4: 03:50:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:03 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 03:50:03 executing program 5: 03:50:03 executing program 2: 03:50:03 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c961050000001d48e56c969a3547034571923a2c0e75ecb75217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731bd6a16792b1319e2acc0eb1ba8116a4ae39f9465a4cf19d78a656c9c9ab39cc56dcf882cf3634e82b4d1f8e00b92c49a9fc3b9ed49f55dcd880fdac079d00eb23ad6da7c30c7dce2818616267e875a9c69d0ab4aa1c2b9b92762bfa0d6d2c681e45c728509f9bb9c514d374957c6c2c35e80f5b1e8bea870c02959495d27e67bd6b608a8869724028c9623c1c056ca60d174593bc67f1786ad16c0e5dff449757f03e8b552cee06e00"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="23edb790d372818a86c1f85dabfd0000"], 0x10094) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 03:50:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 03:50:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:03 executing program 5: 03:50:03 executing program 2: 03:50:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:03 executing program 4: 03:50:03 executing program 3: 03:50:03 executing program 2: 03:50:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:04 executing program 2: 03:50:04 executing program 5: 03:50:04 executing program 3: 03:50:04 executing program 4: 03:50:04 executing program 1: 03:50:04 executing program 3: 03:50:04 executing program 2: 03:50:04 executing program 4: 03:50:04 executing program 5: 03:50:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:04 executing program 1: 03:50:04 executing program 4: 03:50:04 executing program 3: 03:50:04 executing program 2: 03:50:04 executing program 5: 03:50:04 executing program 3: 03:50:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:04 executing program 1: 03:50:04 executing program 4: 03:50:04 executing program 3: 03:50:04 executing program 5: 03:50:04 executing program 2: 03:50:04 executing program 1: 03:50:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:05 executing program 4: 03:50:05 executing program 5: 03:50:05 executing program 3: 03:50:05 executing program 1: 03:50:05 executing program 2: 03:50:05 executing program 5: 03:50:05 executing program 4: 03:50:05 executing program 3: 03:50:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1d") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:05 executing program 1: 03:50:05 executing program 2: 03:50:05 executing program 5: 03:50:05 executing program 1: 03:50:05 executing program 4: [ 1438.925026][ T6928] rds_bind: 7 callbacks suppressed [ 1438.925045][ T6928] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:05 executing program 3: 03:50:05 executing program 2: 03:50:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1d") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:05 executing program 5: 03:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000002880)={0x18, r1, 0x121, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) [ 1439.142837][ T6937] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f64080000058915e2c46c4639b96ffe00008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x3a7) 03:50:05 executing program 3: 03:50:05 executing program 4: [ 1439.202345][ C0] net_ratelimit: 32 callbacks suppressed [ 1439.202358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.213817][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1d") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:05 executing program 3: 03:50:05 executing program 5: [ 1439.352336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.358122][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") ioctl(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000009280)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @ipv4={[], [], @local}, 0x20}}, 0x24) close(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000740)={'#! ', './file0', [{0x20, '$!'}, {0x20, './cgroup\x00'}, {0x20, 'memory.stat\x00'}, {0x20, 'ppp0'}, {}, {0x20, 'memory.stat\x00'}, {0x20, 'memory.stat\x00'}], 0xa, "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"}, 0x1045) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 03:50:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1439.423651][ T6948] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1439.522314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1439.528121][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:50:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:50:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000340), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)=0x256) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x10010000000031) 03:50:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1439.703477][ T6961] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x9}) [ 1439.855413][ T6974] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1439.893653][ T6979] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:06 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) [ 1439.904423][ T6977] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1439.925450][ T6977] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1439.933045][ T6977] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1440.312323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.318089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.392352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.398148][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:50:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") ioctl(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000009280)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @ipv4={[], [], @local}, 0x20}}, 0x24) close(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000740)={'#! ', './file0', [{0x20, '$!'}, {0x20, './cgroup\x00'}, {0x20, 'memory.stat\x00'}, {0x20, 'ppp0'}, {}, {0x20, 'memory.stat\x00'}, {0x20, 'memory.stat\x00'}], 0xa, "92f9f1a55ee3d806a9fa49c2482ed4eb806e6c08da5813c8b7ddbfda19a0ce39d91fbf5a0aef9daa6f03665f3d0498e2d06740023f70e59581f6355d1478ea4654699099c654edb289990871143350ff2a32c7ed9d57cd04d750abbeab839cfd11c65a8b4a32e19bbdb7a987a30a0d62212488829acda2428a72126751e72104e8dab9d3de1ddfe515ef6295b1516cc5c306feaf6d3509504d125dff4519e57a22a63f7a54297636f9c85a1e49450f5b45c7be75bb9ca47af1e8d7cef70465b815c69c27399f865436567a21f7f2f8e21d3d14e7554491f2a14a78cbc5788f83e9feedda947f7811aa386c9806588a7ed14cccb6c109da9dd5a733ff77901524948942120b808310dafc217b959565d3c54e3b97d6002a6e9c996b47e58bf8576acd5514bd4a127369d09ad753c8030870097f610c36525ed929f12eb38b22af83da24e1d639308de3ce23fb49a05dc508ce73a367c8a328fd93922197166d8536f03c559a4d7eb260dbde7b65f695b6d81d73a11fcfc296305f8f7000dd6d378a078166f050864e56f567d7bc411566be4e947d260cee0b8736ecd4be45ee8a798b426ba184d301a7b2bea53d328b981141d8f245369e794da438342dc60a20db393860d712e244745f242bb195cb04b7ceb66f4d0c7a2df55f4e0a69cac1e165a52ac444f2c4052ec8315ddf3a14f5390a9e4eb318b5f7c6d909d7faf3fd2496f75d630dbd63761eed58607c9f7319d5235b705a252595a3eb2788eeec1d3cdd80657147c51a6524bd2be28039c7c144fdaa29cb89859f107257d9cf03748729189e0575869c32528dc054b10a1f523cc3b5d0b0efc69849e6b5d184b76ff0bff973d28740ce4c224755db506b02eef4a3f816adad1636901fb5f81c34306fd697777d90bc79329a97becc7598c03d9ecb0ac0d7d6e508458b537c50a78769cf4ee85bd113bf77a48fa801080e4519bc4079dfc36f89ab5253716a29da2f9c5e6ccd232526d25b31f62cdb3f3b282b4463bcd32e79546db786c77612d29ab3de71a2958d2df28f1c57f4005bd58f84e8645597fa4d4212178cc87776c4b4379c7885f2772a4eafbf20f8521c094f42ec556d1800b138555ef5bc4f65e25788df724b950fe1795ceb1d0c1f7ae7ce3b79f167bbb6d9b8bcb09c88f15b0fbcb0bf31d73fa8439b30d77d0b5d32598146d3f5ce600e502372da868d38e4c62eb3dc7fd6c15134ffa1946a624b67ea8b353efa9149d3b1af6be58e8f3b6648c26cbb49b7b661bf217f062af708c11f3ca17955f884b3e31b535b8cc5725798474318c2ace0fa0863c9d768879c1cae6d903843f14f24753cbc0a37b13f1876937b09f895132c4121e98630cfd761be9007bad20eecf2e7bd03bac0672cb9ac72b333c6caad23b5c8ab631f5e84b72839580273eec9a27b3879c6082cb3464a5f090f2ad0f71bce4feac4d63106a9015cc678756bcb2915a49c53f8552618262a2a7c25b5442ae2f6adb583206ee530e60e5796e198a1890e6fbb3a2775e93cc834e0a3b6acad7adfe785e2fa672b6f05f6bb5e7f8b585e3b6109e05405512f7e183e3159db1d72c7426032e60ad857df04d737ef30e676c9a28dbbf35038852668b5a46cd90fee17d32811710f742d0a066966738340e75e31f25e04c60c36a666b9175a6e0a50166de01ce0777c76ea8407ce925dcfc1a0adaf8c3a0b548c9e2c8aab167990f3c15e04601202aa1a64871e020f43c14378b1093c29ec0b922d669f32509fa96c1a589a798cddc479ea107f3d86a28309bd0d36b79bae2b3e9109a7eacfc0dd61f3dd096e0a34c18b631c4988099366a479a13e36405ae0d89ebb33459891f2fc70d59380d4956141526f8e38f9e3be7f50ae337cf933407fe3c580fa2b6ec593192ac7b03a824b78c0b098353bb0f9f08df6734e5a702cdfa6a16f4051f6b6a60dfa820232710fa0716a6dab49598d56c825381c824cec2fe0bf7622ccff1260d2b4c099db6d3707c0a05a1d5f22b2c7abc870b102cc1f31deca3841a61cc6dc1736affdbc36208e7c7a5c877869bf2ec2f0f36d54c43dab2ac703dd8fe391cf63351811d8a1f6e0c1dd261bf5e92a3f5ea7ed939c794b6d8620d1d6b97103e2c27fdc0045ea0b4833a6bb98b60482c4c075e460ebe3750cbd02d22b1e81aae7d39475bd53b75c98ceca4c993af435191efe14baae22aa55076d14df9c36d5878e00d20e0da11971e0588d41328b78b0002b95fbac8d41d3f5863559e61c98862bb4cd9201b05b7ad8e6396ec3ceeafe0ddf33f36381ccab82cfdb692c577f49da52cda555037288a61f17da0c7b0c5b4361f3d8284b9839cbee9023ef743c84037da9588a687cd33d375558ba6e8820d08eeee70ec4a9003ba04311c90c9d91af30aa6a192e3c24279928b8cdfe7b013d211603030e659fa6baabb56396db86702223da772c1c1daf01fef30e765a5a72f0f10b6210261c48778192f504d8411387b85ea310a65574f0874559f9586214b5dde0c75120b2aeecbe1606c1549832a091c4d7685a6090c4d06589ee424b948220afc9a843fbc459756312cae7f677225e27bc583d0fdd266f24235d794d38983cfbfa193346d8808bdee0dbf893089ba422d871072ce474c4bcfc69265594616b69412cefed8380d0092ea02fdddb164e3d28250c30c7cb58e4fd92fbf9ea18880e0036dc1043d965af6bfe787c30d6e1c76d898deaa85a278906aef48c3337faa28ccbe76099bd3281c68002a24a973e296a593d6ab1d4d67fc2c3fc2a88227f04da450ee2c696da79af83a488fcc023497512afd70a1466f50ef1eca3aca93fa626645cfddc2624cbf220d72c0f3289cc789a17e7bca394e0b4a7cc83098338bb2bc241851fac312d6120d56f98c3b29917e8e09d2c0a74367fc5ef1789250ee6891513852794a160481abea681ac94f951bf8805d9eb746a4c3d0a459e65b6fba007c5c32faefc289526403ccd159982e6066167ed931842e263a0b808ecfc90064d7dc42eb7a0e23da751f9ea091fbf209ec5beb7d0190afd64b94ddbf0d1fc60d37a149ddcabf51ad2198af9bd2796af19a7bd69d11b973ae4ae78a7c6d18e55af5d8270deb40da69f351f4101cafb53e845c046d32cf54fb17e10827e8aa2aa3604bf3a8c3d02d6410cd77c56c8d4084dceb402dd70e7f5bbdfe8eaef984b940d4b7ac59a37556a4a76f0215501ca0ea3379a34317edf3a7b40a7bbfe1a9891229a538700b45eed51397bb4b4ed52e967e7691f4865fe2bdc211391aec7b6a77d878658d8bfd7cc5a4c603aac008613a632c3862688b0d6a275309672b7f60977dcd17c5a7d6a6f257f1dcc57c35a0b475d39b3b6f45521ed8954f1aaf561d306b80f53aba91e0337fbd2589ab0d3f961ad0e89ff1c29d180f2e67c0bb8e96764998a172d332cd5e45b31703a188d559de2573a0c00ce539420522336b821afe3607f3df5affc733277b6134ce9aaff5cdb41f6349ab077ccf5c981ac6a0b2843d5c94116dc5b957e8f5a26d0bbb2c7b767cc8b92713a95d23af7f00464c80ae45e128e678cdce56d370fbeccb706d522f7f4d5ec243e045ed7a9281bf78e96f603d05866b3455f3d1e8b3efa2884f1ce8c4c275d7f7621e97bc29e33b9c897f84aaefffac21482d0651ed3b5f83cc85654919bbecdcec9b9fef8097a5227ea6fa30fe9abf27ad0aecf8463203f3090215e9974113b32113ba889a00413ee1d4dcc7ce6e5e35576f75d2118a3440d49b3a4e51ac8e229e4f34f84f8678139e90ce6d5a32a5f65438f26749210040aa9ef6a72768c978069df2af9962736b8951b611206363596f593d0ed67bcb89e27104a4d135537925f13ea80a20fddeff77d210af99717d757c8c6dfd2a16c8ba9ee018d995b21dabf4fcc6b4bf7cd1c8542cb04a836888c0daf5c34b4179a14e2b2a1c7e3a9fec7c093e5dfd6905a0cb532a468d289f9cadd397e18abf2164b76dcb649a3845c02f6de4da009c99cd2bbf68ec7d9656056b72dc0f7186708c11666ac4c8b70e1b7cf61b8500e6c008d4914d11a2cd21437183fa91f4d0b4561ca220ad741678a2cf611558a837db8d0532b74e699296f28834bb75c3d8e57fd5604b6ecc54be30f31970befd0df5aeb8ad13afcbddaa0ae8431548a31f9ed94df1bcf6dfb2bdb3608b8c0bde64a070d8285c1e6cdf3f607a5e9fcf6515a814100f25514c8fa8c57847ee8c1985d1d8ca5df209ef8bd743bc95be6431a53e3d650a58caa0916c0e8584aae42ea8b8ad3f0427819bacc87f7bf1a813ca6638522b968990511a905db202e01806a6c384af74231debd93a672fa384af92bbf3a5a6990749b9c6d397196d30200c515fd3e8e4ca5f76080e0f28085397471c57c648922c3195a4ba0f528f224b0fc7d2f12a674783ab3184dc6240771771cc572d5af4109a70650101896efe9d13b459adb57cdf2623ef4ace96a149c9485ab01aa9ee0789c4419a09012ff0e5690f756eff5a0b3b6e6875f66df97b6dea4c81c2242de63d6ba8ba8696882295e048420d804832ab818eda6abe4d83d23dd257b972fe01e36f8082508424d729dfb64499e8fcd6f3bfaac50024ee1a00065dc6a674049c53b67dae6582e18e0dfaa9b8dcce3367a2fd5687c03787fbe4153ef9534c35ab5eea6524cf1d7e9141863dc1c1b3d1a7aa03c463ffa6ef01c693c230b5f5a428f4434f4250586e5b9ed0909af32d78a9b6e32b44591395db3d5a131a1a62c90d93e52825a9f414cf0846c3ee102a655266b4fe2d7aea48526d8c7969112c4483c5ce4b2e00e5a0ae6480777d2280853a9dc30001aee52140894c3519010b70d1796e79bf6a2c8b8b5a55d217dbda12ca75102a46f57bed2f627bd98b96d55a1ed3e26c73e2fc797e7c44ba456653714f98fa8cec2c0a912a2776a4ae5eafa0e5a6b20a21a9dbd3a62c0a095f6cec3a3c7b85f6831a954faaab02b52619fa346b93487debc819a59d171e0bfc7f5387b45831507896a8a83a212d898306de8b3a3765bb09f84bc383ca58b5afc17ba854182e29d59f1dad4df6572e51d1c0d922f439bc89dc47957b1b4c65ab0b03f7be18802a82fef616d28d340eddfffd86335a484f29c9ddbe89f9d612c0591e9a5a9930bda7a19bac38996e8f2609b6a405b381555bdf7dca605914500e18954f627f9f08a25da46a404120742d13bb97cef46496a71b1c15514ceaac1901e5c5d057717c78d7628022d266bda8607df6446019ca29a984ae383f3a4edab60e1cddca157738d6336390e038abe7a05a740bbffdfb9e759b092e4debc04253cb7ed71995fcc8c84b259cfe86ba23f94ae3c400cd2fff843a863503aa88241564056fc9fbbe7449b185038753afde20ad49b51000ebd70f2edb3e1a796f97035f0126cbc63015c845cf95c19ca07f22cf8d8bb398b07a59c3f4d71dac9bc84adea7dce29f0ebcbeca61a58179031c1f0f904b64863e8005e07414cd36fcdb9c23653930a0d00f6151c9929f28df760c9ec9e9450e658cc5103cedbed72040d9eb6e5e1977e554f2ce8f80f42b4505f3bcce43b5bed1590abbfff920d1bb774a8c554ea21fa8efcab0e742bb6ff4b67bdae359c58fa7167cfc319869a644cdc2c5d06cf95e374503f1e70bb4b8a35ff70a81d2ac1533882e86e1c81167a5ce68259501cec00faa83a6eb926a82f4d14dd4ace845834556f553d67ff2c09e95fe1c1568e42b04257b7169f8a0ed361ef97f82e952367fa160c330015841a9063191ecd2bfaced1"}, 0x1045) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 03:50:09 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/d/v/input/event#\x00', 0x0, 0x0) 03:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200), 0x4) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0xf) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/85) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000340)=0xfffffffffffff830, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x2800) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 03:50:09 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) move_mount(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1442.592239][ T6990] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1442.601709][ T6991] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1442.617418][ T6995] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1442.628618][ T6995] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1442.636146][ T6995] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 03:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc5, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1442.776290][ T7005] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1442.792986][ T7006] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1442.884750][ T7010] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1442.917597][ T7010] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 03:50:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1442.940232][ T7010] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1442.997589][ T7014] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 1443.045910][ T7016] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1444.472337][ C1] net_ratelimit: 28 callbacks suppressed [ 1444.472352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1444.483807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1444.552374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1444.558217][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.192332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.198098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.203925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.209657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.272350][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.278132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1449.592356][ C0] net_ratelimit: 32 callbacks suppressed [ 1449.598058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1449.603828][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1449.752344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1449.758130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1449.912347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1449.918174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.712325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.718180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.792394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.798166][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:50:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') 03:50:19 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0x6}}, 0x0) setitimer(0x3, 0x0, &(0x7f00000000c0)) 03:50:19 executing program 3: r0 = socket$kcm(0x2, 0x1000000000000801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0xff0f}], 0x1}, 0x0) 03:50:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:19 executing program 1: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200), 0x4) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0xf) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/85) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000340)=0xfffffffffffff830, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x2800) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) [ 1453.040395][ T7027] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? 03:50:19 executing program 1: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)) 03:50:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 03:50:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x0, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:19 executing program 1: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:19 executing program 2: [ 1454.872388][ C1] net_ratelimit: 28 callbacks suppressed [ 1454.878060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1454.883855][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1454.952373][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1454.958168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1455.592323][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.598123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1455.603900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.609628][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1455.672362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.678228][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:25 executing program 4: 03:50:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x0, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:25 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:25 executing program 2: 03:50:25 executing program 3: 03:50:25 executing program 5: 03:50:26 executing program 2: 03:50:26 executing program 5: open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x55aa40be, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:50:26 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:26 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @empty, @mcast1, 0x0, 0x1, 0x51, 0x100, 0x1, 0x0, r3}) 03:50:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x0, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) [ 1459.732093][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1459.837440][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1459.902626][ T7083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1459.992312][ C0] net_ratelimit: 32 callbacks suppressed [ 1459.992322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1460.003786][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1460.152433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1460.158410][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1460.312367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1460.318178][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1461.112321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1461.118104][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1461.192354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1461.198181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1465.272376][ C1] net_ratelimit: 28 callbacks suppressed [ 1465.272386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1465.283883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1465.352375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1465.358169][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:50:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000180)=0xfe27) 03:50:32 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:32 executing program 5: open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x55aa40be, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:50:32 executing program 2: r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x55aa40be, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 03:50:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1465.754771][ C0] sd 0:0:1:0: [sg0] tag#2291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1465.764252][ C0] sd 0:0:1:0: [sg0] tag#2291 CDB: Third party copy in, sa=0x1f [ 1465.771822][ C0] sd 0:0:1:0: [sg0] tag#2291 CDB[00]: 84 7f 32 73 c5 a3 ee c8 cd bd ad 71 e0 59 8b 0e [ 1465.781450][ C0] sd 0:0:1:0: [sg0] tag#2291 CDB[10]: 6f 2d f8 d2 26 3f 09 4b 7d 2b a9 d1 89 db d3 de [ 1465.791049][ C0] sd 0:0:1:0: [sg0] tag#2291 CDB[20]: d8 03:50:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) 03:50:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1465.992305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1465.998138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.003966][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.009731][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) [ 1466.072502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.078607][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:32 executing program 2: r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x55aa40be, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) [ 1470.392329][ C0] net_ratelimit: 32 callbacks suppressed [ 1470.392338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.403739][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1470.552324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.558158][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1470.722326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1470.728154][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) 03:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socket(0x40000000015, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:37 executing program 5: open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:50:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) 03:50:37 executing program 2: request_key(&(0x7f0000000800)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x109, 0x8, 0x1}, &(0x7f0000000280)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="72e4bbf9a0683f630454e26f0c793875ef"], 0x11) sendfile(r1, r1, 0x0, 0x40fdf) 03:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socket(0x40000000015, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 03:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socket(0x40000000015, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) 03:50:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) [ 1471.512334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1471.518131][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1471.592318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1471.598121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1475.672328][ C1] net_ratelimit: 28 callbacks suppressed [ 1475.672340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1475.683840][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1475.752393][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1475.758178][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:50:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r1, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0xf) ioctl$GIO_SCRNMAP(r4, 0x4b40, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 03:50:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) 03:50:42 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffc57, 0x0, 0x0, 0x0, 0x274}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x800000) 03:50:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) 03:50:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 03:50:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, 0x0, 0x0) 03:50:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x980000, 0x0, 0x0, [0x7000000], 0x0}) 03:50:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 03:50:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x980000, 0x1, 0x0, [0x7000000], &(0x7f0000000080)={0x980912, 0x0, [0x2000000], @string=0x0}}) 03:50:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) [ 1476.402334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.408144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1476.413953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.419694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1476.472324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.478111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1480.792409][ C0] net_ratelimit: 32 callbacks suppressed [ 1480.798312][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1480.804056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1480.952422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1480.958398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1481.112390][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.118440][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1481.912396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.918284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1481.992394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.998384][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1486.072372][ C1] net_ratelimit: 28 callbacks suppressed [ 1486.072384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1486.083828][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1486.152352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1486.158176][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1486.792344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1486.798179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1486.803976][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1486.809732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1486.872354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1486.878218][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r1, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0xf) ioctl$GIO_SCRNMAP(r4, 0x4b40, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 03:50:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:53 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0xc140, 0x0) 03:50:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) 03:50:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 03:50:53 executing program 3: 03:50:54 executing program 3: 03:50:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 03:50:54 executing program 5: 03:50:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 03:50:54 executing program 3: [ 1491.192344][ C0] net_ratelimit: 32 callbacks suppressed [ 1491.198026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1491.203785][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1491.352356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1491.358167][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1491.512335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1491.518174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1492.312376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1492.318188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1492.392358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1492.398138][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:51:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x511a80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xc6e3, 0x10000) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) umount2(&(0x7f0000000100)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='IPVS\x00') pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 03:51:01 executing program 0: 03:51:01 executing program 5: 03:51:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 03:51:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xff49, &(0x7f0000000640)={&(0x7f0000001740)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2221}}, 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:51:01 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c0000000000000000000000ffff0000c608855755945c0000fd44f277cbdcd7de1648a48afc85340da9a71f451fa48dbaf38a13504b39e4682b835ac5d8aad7311733ea017f6a1ff387af61d223865daf2dcab65c67ad085a368847981d81df3f817bb7a5dcfedd08164a070f89e0fcc65a3d0f4f1d0872e81c2b332ccdf6c7e1dbdf8198028e7c433cf29e46e111c72ca2b4ec6ab124f589477d590c3d596ea2b82d7d5fec9738d96812f5af88041cbc972c9f8593de6082f69cdd19074b7b27153c3e622f906d06f157d4d4bc72dacef858e93288994f5d47c9"], 0x28}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) [ 1494.567883][ T7221] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 03:51:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000100), 0xffba) 03:51:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 03:51:01 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x10, 0xfffffffffffffffb}, 0x0) pipe2(0x0, 0x84000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x20) epoll_create1(0x0) r4 = semget$private(0x0, 0x2000000010a, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) semop(r4, 0x0, 0x0) semctl$IPC_INFO(r4, 0x4, 0x3, &(0x7f0000000140)=""/158) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000010a0080000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/84], 0x4}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r7, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000100)='./file0\x00', 0x0) 03:51:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x68e, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/1678], 0x0) 03:51:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0009a6000000000020a47000000000", @ANYRES32], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 03:51:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1494.883769][ T7244] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1496.472340][ C1] net_ratelimit: 28 callbacks suppressed [ 1496.472353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1496.483824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1496.552354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1496.558138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1497.192322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.198112][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1497.203894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.209631][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1497.272324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.278155][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1501.592321][ C0] net_ratelimit: 32 callbacks suppressed [ 1501.592329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1501.603853][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:08 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc05812fe, &(0x7f00000004c0)={0x53, 0x0, 0x40000, 0x0, [0x8370000]}) 03:51:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 03:51:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r1) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x80000000, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0xffff000000000000) 03:51:08 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c961050000001d48e56c969a3547034571923a2c0e75ecb75217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731bd6a16792b1319e2acc0eb1ba8116a4ae39f9465a4cf19d78a656c9c9ab39cc56dcf882cf3634e82b4d1f8e00b92c49a9fc3b9ed49f55dcd880fdac079d00eb23ad6da7c30c7dce2818616267e875a9c69d0ab4aa1c2b9b92762bfa0d6d2c681e45c728509f9bb9c514d374957c6c2c35e80f5b1e8bea870c02959495d27e67bd6b608a8869724028c9623c1c056ca60d174593bc67f1786ad16c0e5dff449757f03e8b552cee06e00"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="23edb790d372818a86c1f85dabfd0000"], 0x10094) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32], 0xff15) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 03:51:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1501.752306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1501.758119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1501.788362][ T7254] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 03:51:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:51:08 executing program 5: [ 1501.922294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1501.928115][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:08 executing program 2: [ 1501.971315][ T7264] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 03:51:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:51:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1502.712335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.718139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.792345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.798110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1506.872314][ C1] net_ratelimit: 28 callbacks suppressed [ 1506.872322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1506.883791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1506.952329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1506.958150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1507.592407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.598283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1507.604095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.609838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1507.672357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.678178][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:15 executing program 2: 03:51:15 executing program 5: 03:51:15 executing program 4: 03:51:15 executing program 3: 03:51:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:51:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:15 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:passwd_exec_t:s0\x00', 0x23, 0x0) 03:51:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:15 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0xa, @sdr}) 03:51:15 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 03:51:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:51:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1509.247183][ T7295] QAT: Invalid ioctl [ 1511.992305][ C0] net_ratelimit: 32 callbacks suppressed [ 1511.992313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1512.003826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1512.152324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1512.158150][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1512.312316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1512.318113][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\n', @ifru_mtu=0x1}) pread64(r0, &(0x7f00000002c0)=""/127, 0x4, 0x0) 03:51:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:19 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) pwrite64(r0, &(0x7f0000000300)="9c", 0x1, 0x0) 03:51:19 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x420000a77, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) r5 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x1000000000013) 03:51:19 executing program 5: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x261801) syz_open_dev$admmidi(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f00000006c0), 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x109, 0x8, 0x1}, &(0x7f0000000280)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="72e4bbf9a0683f630454e26f0c793875efe4539b333c"], 0x16) sendfile(r1, r1, 0x0, 0x40fdf) 03:51:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1513.112338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1513.118109][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1513.192312][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1513.198127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1513.207919][ T7307] debugfs: File '7305' in directory 'proc' already present! 03:51:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) [ 1513.255878][ T7307] binder: 7305:7307 unknown command 6 [ 1513.261422][ T7307] binder: 7305:7307 ioctl c0306201 20000080 returned -22 03:51:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:51:19 executing program 5: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x261801) syz_open_dev$admmidi(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f00000006c0), 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x109, 0x8, 0x1}, &(0x7f0000000280)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="72e4bbf9a0683f630454e26f0c793875efe4539b333c"], 0x16) sendfile(r1, r1, 0x0, 0x40fdf) 03:51:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) [ 1513.490238][ T7327] debugfs: File '7326' in directory 'proc' already present! [ 1513.504665][ T7327] binder: 7326:7327 unknown command 6 [ 1513.510144][ T7327] binder: 7326:7327 ioctl c0306201 20000080 returned -22 03:51:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire], 0x0, 0x0, 0x0}) [ 1513.624360][ T7333] debugfs: File '7332' in directory 'proc' already present! [ 1517.272388][ C1] net_ratelimit: 28 callbacks suppressed [ 1517.278076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1517.283818][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1517.352354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1517.358164][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1517.992337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1517.998120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.003862][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.009592][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.072378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.078224][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:26 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000080)={0xa00965, 0x0, [0x2000000], @p_u16=0x0}}) 03:51:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 03:51:26 executing program 5: open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:51:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x400000000000003f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000080)={0x980912, 0x0, [0x2000000], @string=0x0}}) 03:51:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) [ 1520.357083][ T7350] debugfs: File '7343' in directory 'proc' already present! [ 1520.393590][ T7350] binder: 7343:7350 unknown command 6 03:51:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x1) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x47) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8086) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x21, 0x2}, 0x7) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6e4aef4e5c41528d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/181) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x161) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x808100000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) [ 1520.408099][ T7350] binder: 7343:7350 ioctl c0306201 20000080 returned -22 03:51:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:51:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1520.642106][ T26] audit: type=1800 audit(2000001087.179:141): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16625 res=0 03:51:27 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x98000003}) shutdown(r2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0xd1}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 03:51:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) [ 1520.748511][ T7361] debugfs: File '7360' in directory 'proc' already present! [ 1520.798899][ T7361] binder: 7360:7361 unknown command 6 [ 1520.804758][ T7361] binder: 7360:7361 ioctl c0306201 20000080 returned -22 03:51:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1520.991154][ T7372] debugfs: File '7370' in directory 'proc' already present! [ 1521.006182][ T7372] binder: 7370:7372 unknown command 6 [ 1521.012211][ T7372] binder: 7370:7372 ioctl c0306201 20000080 returned -22 [ 1522.392368][ C0] net_ratelimit: 32 callbacks suppressed [ 1522.398078][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1522.403882][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1522.552343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1522.558145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1522.712346][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1522.718153][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1523.512346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1523.518162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1523.592386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1523.598202][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:51:33 executing program 4: 03:51:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:51:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5646, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) 03:51:33 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x98000003}) shutdown(r2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0xd1}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 03:51:33 executing program 2: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') [ 1526.638191][ T7385] Sensor A: ================= START STATUS ================= [ 1526.652048][ T7386] debugfs: File '7379' in directory 'proc' already present! [ 1526.671609][ T7386] binder: 7379:7386 unknown command 6 [ 1526.678439][ T7385] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 03:51:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1c, 0x0, 0x0) [ 1526.692029][ T7386] binder: 7379:7386 ioctl c0306201 20000080 returned -22 [ 1526.703757][ T7385] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1526.737035][ T7385] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1526.743655][ T7385] v4l2-ctrls: Sensor A: Brightness: 128 [ 1526.749446][ T7385] v4l2-ctrls: Sensor A: Contrast: 128 [ 1526.758183][ T7385] v4l2-ctrls: Sensor A: Hue: 0 [ 1526.764517][ T7385] v4l2-ctrls: Sensor A: Saturation: 128 [ 1526.770531][ T7385] Sensor A: ================== END STATUS ================== 03:51:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:33 executing program 2: 03:51:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5646, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) 03:51:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1c, 0x0, 0x0) [ 1526.925733][ T7399] debugfs: File '7397' in directory 'proc' already present! [ 1526.950915][ T7399] binder: 7397:7399 unknown command 6 03:51:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5646, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) [ 1526.975931][ T7399] binder: 7397:7399 ioctl c0306201 20000080 returned -22 [ 1527.143657][ T7407] Sensor A: ================= START STATUS ================= [ 1527.164419][ T7407] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1527.174677][ T7407] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1527.200860][ T7407] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 1527.208759][ T7407] v4l2-ctrls: Sensor A: Brightness: 128 [ 1527.215023][ T7407] v4l2-ctrls: Sensor A: Contrast: 128 [ 1527.220675][ T7407] v4l2-ctrls: Sensor A: Hue: 0 [ 1527.225709][ T7407] v4l2-ctrls: Sensor A: Saturation: 128 [ 1527.231520][ T7407] Sensor A: ================== END STATUS ================== [ 1527.672341][ C1] net_ratelimit: 28 callbacks suppressed [ 1527.672348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.683759][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1527.752350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1527.758166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1528.392356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.398183][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1528.403977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.409726][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1528.472442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.478254][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:37 executing program 4: 03:51:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5646, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) 03:51:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1c, 0x0, 0x0) 03:51:37 executing program 5: [ 1531.005672][ T7413] debugfs: File '7412' in directory 'proc' already present! 03:51:37 executing program 2: [ 1531.046657][ T7414] Sensor A: ================= START STATUS ================= [ 1531.085549][ T7414] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar 03:51:37 executing program 2: 03:51:37 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1531.115731][ T7414] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1531.148566][ T7414] v4l2-ctrls: Sensor A: Horizontal Flip: false 03:51:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1531.212396][ T7414] v4l2-ctrls: Sensor A: Brightness: 128 [ 1531.218210][ T7414] v4l2-ctrls: Sensor A: Contrast: 128 [ 1531.238463][ T7414] v4l2-ctrls: Sensor A: Hue: 0 03:51:37 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) [ 1531.265538][ T7414] v4l2-ctrls: Sensor A: Saturation: 128 [ 1531.286577][ T7414] Sensor A: ================== END STATUS ================== 03:51:37 executing program 2: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 03:51:37 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffc57, 0x0, 0x0, 0x0, 0x274}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 1531.333022][ T7426] debugfs: File '7424' in directory 'proc' already present! [ 1531.358716][ T7426] binder: 7424:7426 unknown command 6 [ 1531.367566][ T7426] binder: 7424:7426 ioctl c0306201 20000080 returned -22 [ 1532.792338][ C0] net_ratelimit: 32 callbacks suppressed [ 1532.798018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1532.803758][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1532.952438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1532.958233][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:39 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000011c0)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:51:39 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:51:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:39 executing program 2: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 03:51:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x5646, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) 03:51:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffc57, 0x0, 0x0, 0x0, 0x274}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setresuid(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 1533.097490][ T7445] Sensor A: ================= START STATUS ================= [ 1533.112325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.118154][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:39 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) [ 1533.141602][ T7445] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 1533.163137][ T7445] v4l2-ctrls: Sensor A: Vertical Flip: false [ 1533.189543][ T7445] v4l2-ctrls: Sensor A: Horizontal Flip: false 03:51:39 executing program 2: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 03:51:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1533.213956][ T7445] v4l2-ctrls: Sensor A: Brightness: 128 [ 1533.241489][ T7445] v4l2-ctrls: Sensor A: Contrast: 128 [ 1533.258479][ T7445] v4l2-ctrls: Sensor A: Hue: 0 [ 1533.271556][ T7445] v4l2-ctrls: Sensor A: Saturation: 128 [ 1533.290146][ T7445] Sensor A: ================== END STATUS ================== 03:51:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:40 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000400, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 1533.523856][ T7460] debugfs: File '7456' in directory 'proc' already present! [ 1533.536561][ T7460] binder: 7456:7460 unknown command 6 [ 1533.541988][ T7460] binder: 7456:7460 ioctl c0306201 20000080 returned -22 [ 1533.912353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.918158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1533.992342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.998191][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1538.082305][ C1] net_ratelimit: 28 callbacks suppressed [ 1538.082318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1538.093846][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1538.152336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1538.158134][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1538.792299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1538.798126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1538.803904][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1538.809704][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1538.872339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1538.878130][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:45 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe0fd9900fd3694e0) 03:51:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000140)={0x0, 0x35, "03d854bf68e791bfefe5706bd86ccfa06d2a24daf11a66415a705509625e11b0981e642e06ee4d98b8dacaef87e3281f85972d315e"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x3, @empty, 0x1}, {0xa, 0x4e22, 0xe12f, @loopback, 0x8}, 0x2, [0x7, 0x6, 0x0, 0x0, 0x0, 0x6, 0x3, 0x6b9c3892]}, 0x5c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:51:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:45 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 03:51:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:45 executing program 5: r0 = eventfd(0x1) read$eventfd(r0, &(0x7f0000000100), 0x8) 03:51:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) 03:51:46 executing program 2: request_key(&(0x7f0000000800)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x261801) syz_open_dev$admmidi(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f00000006c0), 0x4000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x7, [0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0x6]}, &(0x7f0000000180)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x109, 0x8, 0x1, r6}, &(0x7f0000000280)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 03:51:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:51:46 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={'poly1305\x00\x05\x00'}}) 03:51:46 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x31d}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') sendfile(r0, r1, 0x0, 0x1) [ 1539.609837][ T7494] debugfs: File '7492' in directory 'proc' already present! [ 1539.641005][ T7494] binder: 7492:7494 unknown command 6 [ 1539.647719][ T7494] binder: 7492:7494 ioctl c0306201 20000080 returned -22 [ 1543.192352][ C0] net_ratelimit: 32 callbacks suppressed [ 1543.198017][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1543.203778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1543.352331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1543.358149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1543.512338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1543.518127][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1544.312335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1544.318091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1544.392351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1544.398152][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:51:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 03:51:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:51:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 03:51:53 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 03:51:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={'poly1305\x00\x05\x00'}}) [ 1546.586145][ T7508] debugfs: File '7503' in directory 'proc' already present! [ 1546.618509][ T7508] binder: 7503:7508 unknown command 6 [ 1546.624615][ T7508] binder: 7503:7508 ioctl c0306201 20000080 returned -22 03:51:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:51:53 executing program 2: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x4}, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:51:53 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:51:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x4000000000000f4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 1546.845567][ T7522] debugfs: File '7521' in directory 'proc' already present! [ 1546.871491][ T7522] binder: 7521:7522 unknown command 6 [ 1546.882435][ T7522] binder: 7521:7522 ioctl c0306201 20000080 returned -22 03:51:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x2700000000000000}}]}) 03:51:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) [ 1548.472305][ C1] net_ratelimit: 28 callbacks suppressed [ 1548.472313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1548.483715][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1548.552347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1548.558146][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.192347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.198273][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.204056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.209803][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.272383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.278179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1553.592370][ C0] net_ratelimit: 32 callbacks suppressed [ 1553.598085][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1553.603888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1553.752412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1553.758238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1553.912332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1553.918107][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1554.712345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1554.718159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1554.792353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1554.798173][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:52:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 03:52:01 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x4000000000000f4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 03:52:01 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:52:01 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000001c0)={{0x0, @remote, 0x0, 0x3, 'fo\x00', 0x2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0x44) 03:52:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={'poly1305\x00\x05\x00'}}) [ 1554.955367][ T7543] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 03:52:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:52:01 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:01 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) 03:52:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:52:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:52:01 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[{@fat=@check_strict='check=strict'}]}) [ 1555.192736][ T26] audit: type=1800 audit(2000001121.739:142): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16779 res=0 [ 1555.296672][ T26] audit: type=1804 audit(2000001121.759:143): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/884/file0" dev="sda1" ino=16779 res=1 [ 1555.395525][ T26] audit: type=1804 audit(2000001121.809:144): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/884/file0" dev="sda1" ino=16779 res=1 [ 1555.986584][ T26] audit: type=1804 audit(2000001122.529:145): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/884/file0" dev="sda1" ino=16779 res=1 [ 1556.013126][ T26] audit: type=1804 audit(2000001122.549:146): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/884/file0" dev="sda1" ino=16779 res=1 [ 1558.872399][ C1] net_ratelimit: 28 callbacks suppressed [ 1558.872407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1558.883861][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1558.952380][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1558.958181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1559.592324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.598161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1559.603964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.609694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1559.672365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.678217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1563.992307][ C0] net_ratelimit: 32 callbacks suppressed [ 1563.992315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.003791][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000001b40)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'xxhash64-generic\x00'}}) 03:52:10 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:52:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002300010000000000000000000400000014000c0000000000000000000000ffff0000c608855755945c0000fd44f277cbdcd7de1648a48afc85340da9a71f451fa48dbaf38a13504b39e4682b835ac5d8aad7311733ea017f6a1ff387af61d223865daf2dcab65c67ad085a368847981d81df3f817bb7a5dcfedd08164a070f89e0fcc65a3d0f4f1d0872e81c2b332ccdf6c7e1dbdf8198028e7c433cf29e46e111c72ca2b4ec6ab124f589477d590c3d596ea2b82d7d5fec9738d96812f5af88041cbc972c9f8593de6082f69cdd19074b7b27153c3e622f906d06f157d4d4bc72dacef858e93288994f5d47c9"], 0x28}}, 0x0) 03:52:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") shmctl$IPC_RMID(0x0, 0xf) 03:52:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) [ 1564.162306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.168125][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:10 executing program 3: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1564.210376][ T7570] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1564.225360][ T26] audit: type=1800 audit(2000001130.769:147): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16737 res=0 [ 1564.280494][ T26] audit: type=1804 audit(2000001130.799:148): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/885/file0" dev="sda1" ino=16737 res=1 [ 1564.312388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.318194][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) [ 1564.329904][ T26] audit: type=1804 audit(2000001130.849:149): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/885/file0" dev="sda1" ino=16737 res=1 03:52:10 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000080)='./file0/file1\x00', 0x0) read$FUSE(r0, &(0x7f0000000540), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, &(0x7f0000003000), 0x1150) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x2, {0x400000000001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bf89e6}}}, 0x90) 03:52:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1c, 0x0, 0x0) 03:52:11 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1565.112332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1565.118138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1565.192324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1565.198144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1569.272330][ C1] net_ratelimit: 28 callbacks suppressed [ 1569.278007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1569.283775][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1569.352352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1569.358120][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1569.992324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1569.998097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.003858][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.009567][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.072786][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.078565][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="850000000700000025000000000000009500000000000000a579753dec29fe276240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea54994e702d609331ab3c70aa6b030ed69efddccd23e793e8287051d4f5fef499e2a4ce758601229b94574e7825441222e81748b4ee09cc6fa47ef6943a143669ef5fc545ab790ef72fd2ca305f386142d7835f213e72c7002a21731859eba975d4a1809acbc7b716c41ef6bac34d0c99d62456cc766be4825548e08587866d70b991d746067c73f47457a8713e7b70a85bbdb078320"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) fstatfs(r2, &(0x7f0000000340)=""/210) 03:52:19 executing program 3: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 03:52:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:19 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:52:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1000000000000003, @local, '\x8f\x00'}}, 0x1e) 03:52:19 executing program 2: [ 1572.570325][ T26] audit: type=1800 audit(2000001139.109:150): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0 03:52:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1572.643332][ T26] audit: type=1804 audit(2000001139.139:151): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/886/file0" dev="sda1" ino=16769 res=1 [ 1572.694580][ T26] audit: type=1804 audit(2000001139.219:152): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/886/file0" dev="sda1" ino=16769 res=1 03:52:19 executing program 2: 03:52:19 executing program 3: [ 1572.842424][ T7614] debugfs: File '7613' in directory 'proc' already present! [ 1572.856530][ T7614] binder: 7613:7614 unknown command 6 [ 1572.868446][ T7614] binder: 7613:7614 ioctl c0306201 20000080 returned -22 03:52:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1574.392398][ C0] net_ratelimit: 32 callbacks suppressed [ 1574.398166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1574.403950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1574.552369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1574.558201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1574.712369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1574.718151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1575.512345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1575.518151][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1575.592377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1575.598138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1579.672343][ C1] net_ratelimit: 28 callbacks suppressed [ 1579.672351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1579.683756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1579.752324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1579.758108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.402337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.408151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.413931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.419656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.482356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.488185][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:27 executing program 2: 03:52:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:27 executing program 3: 03:52:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:27 executing program 4: 03:52:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) [ 1580.911351][ T7632] debugfs: File '7625' in directory 'proc' already present! [ 1580.921865][ T26] audit: type=1800 audit(2000001147.459:153): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16722 res=0 [ 1580.938784][ T7632] binder: 7625:7632 unknown command 6 [ 1580.949701][ T7632] binder: 7625:7632 ioctl c0306201 20000080 returned -22 03:52:27 executing program 2: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = eventfd(0x1) read$eventfd(r0, &(0x7f0000000100), 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) [ 1580.979693][ T26] audit: type=1804 audit(2000001147.489:154): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/887/file0" dev="sda1" ino=16722 res=1 03:52:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000080)={0x980912, 0x0, [0x2000000], @string=0x0}}) 03:52:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1581.067725][ T26] audit: type=1804 audit(2000001147.549:155): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/887/file0" dev="sda1" ino=16722 res=1 03:52:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x98) 03:52:27 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x14}, 0x10) 03:52:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1581.271207][ T7650] debugfs: File '7649' in directory 'proc' already present! [ 1581.299574][ T7650] binder: 7649:7650 unknown command 6 [ 1581.319721][ T7650] binder: 7649:7650 ioctl c0306201 20000080 returned -22 03:52:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf390000, 0x0, 0x0, [0x7000000], 0x0}) 03:52:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0xc, @sdr}) [ 1581.537559][ T7665] debugfs: File '7664' in directory 'proc' already present! [ 1581.555668][ T7665] binder: 7664:7665 unknown command 6 [ 1581.572128][ T7665] binder: 7664:7665 ioctl c0306201 20000080 returned -22 [ 1584.792354][ C0] net_ratelimit: 32 callbacks suppressed [ 1584.792367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1584.803838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1584.952336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1584.958137][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x7f, 0x40, 0x5, 0x0, 0x400, 0x4140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x9}, 0x0, 0x7, 0x0, 0x1, 0x5, 0x1, 0x3e40}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x200, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x0, 'memory'}, {0x38, 'memory'}, {0x2b, 'memory'}, {0x2b, 'io'}]}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000000)={0x2, 0x4e61, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5}, &(0x7f00000003c0)=0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:52:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf390000, 0x0, 0x0, [0x7000000], 0x0}) 03:52:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x0, 0x40, 0x5, 0x0, 0x0, 0x4140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x9}, 0x8000, 0x0, 0x0, 0x1, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x200, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:52:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) sendfile(0xffffffffffffffff, r1, 0x0, 0x5000000) [ 1585.112362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1585.118180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1585.198079][ T7673] debugfs: File '7671' in directory 'proc' already present! [ 1585.208604][ T26] audit: type=1800 audit(2000001151.749:156): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16798 res=0 [ 1585.239853][ T7673] binder: 7671:7673 unknown command 6 03:52:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf390000, 0x0, 0x0, [0x7000000], 0x0}) 03:52:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1585.246356][ T26] audit: type=1804 audit(2000001151.769:157): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/888/file0" dev="sda1" ino=16798 res=1 [ 1585.278602][ T7673] binder: 7671:7673 ioctl c0306201 20000080 returned -22 03:52:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) [ 1585.490585][ T7689] debugfs: File '7688' in directory 'proc' already present! [ 1585.505989][ T7689] binder: 7688:7689 unknown command 6 [ 1585.516093][ T7689] binder: 7688:7689 ioctl c0306201 20000080 returned -22 [ 1585.526597][ T7676] device nr0 entered promiscuous mode 03:52:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1585.658366][ T7695] debugfs: File '7693' in directory 'proc' already present! [ 1585.679553][ T7695] binder: 7693:7695 ioctl c0306201 0 returned -14 [ 1585.695099][ T7695] binder: 7693:7695 unknown command 6 [ 1585.722432][ T7695] binder: 7693:7695 ioctl c0306201 20000080 returned -22 [ 1585.912320][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1585.918163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1585.992324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1585.998148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1590.072329][ C1] net_ratelimit: 28 callbacks suppressed [ 1590.072343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1590.083859][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1590.152328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1590.158171][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1590.802312][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1590.808135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1590.813902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1590.819633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1590.882322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1590.888090][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:52:38 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) r1 = socket(0x40000000002, 0x3, 0x80000000002) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") syz_emit_ethernet(0xfdef, &(0x7f0000000240)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdb2, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, @dccp={{0x0, 0x0, 0x40000000000001c6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1300dd", 0x0, "f53475"}, "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"}}}}}, 0x0) 03:52:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x0, 0x40, 0x5, 0x0, 0x0, 0x4140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x9}, 0x8000, 0x0, 0x0, 0x1, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x200, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:52:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) sendfile(0xffffffffffffffff, r1, 0x0, 0x5000000) [ 1592.343191][ T7714] debugfs: File '7712' in directory 'proc' already present! [ 1592.353773][ T26] audit: type=1800 audit(2000001158.899:158): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0 [ 1592.380297][ T7714] binder: 7712:7714 ioctl c0306201 0 returned -14 03:52:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1592.383982][ T26] audit: type=1804 audit(2000001158.919:159): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/889/file0" dev="sda1" ino=16769 res=1 [ 1592.409234][ T7714] binder: 7712:7714 unknown command 6 [ 1592.417422][ T7714] binder: 7712:7714 ioctl c0306201 20000080 returned -22 03:52:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1592.626980][ T7718] device nr0 entered promiscuous mode [ 1592.652955][ T7728] debugfs: File '7727' in directory 'proc' already present! [ 1592.697855][ T7728] binder: 7727:7728 unknown command 6 [ 1592.703849][ T7728] binder: 7727:7728 ioctl c0306201 20000080 returned -22 03:52:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1592.828524][ T7735] debugfs: File '7734' in directory 'proc' already present! [ 1592.839057][ T7735] binder: 7734:7735 unknown command 6 [ 1592.850033][ T7735] binder: 7734:7735 ioctl c0306201 20000080 returned -22 03:52:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1593.028953][ T7741] debugfs: File '7740' in directory 'proc' already present! [ 1593.038152][ T7741] binder: 7740:7741 unknown command 6 [ 1593.044300][ T7741] binder: 7740:7741 ioctl c0306201 20000080 returned -22 [ 1595.192333][ C0] net_ratelimit: 32 callbacks suppressed [ 1595.192357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1595.203769][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1595.352354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1595.358210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1595.512355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1595.518146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1596.312320][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1596.318074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1596.392356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1596.398150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1600.472315][ C1] net_ratelimit: 28 callbacks suppressed [ 1600.472323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1600.483769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1600.552330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1600.558121][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:52:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:52:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) 03:52:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x0, 0x40, 0x5, 0x0, 0x0, 0x4140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x9}, 0x8000, 0x0, 0x0, 0x1, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x200, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:52:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) sendfile(0xffffffffffffffff, r1, 0x0, 0x5000000) 03:52:47 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xad, 0x80000001, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1600.746468][ T26] audit: type=1800 audit(2000001167.289:160): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16609 res=0 [ 1600.810707][ T7761] debugfs: File '7758' in directory 'proc' already present! [ 1600.825943][ T26] audit: type=1804 audit(2000001167.309:161): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/890/file0" dev="sda1" ino=16609 res=1 [ 1600.829756][ T7761] binder: 7758:7761 unknown command 6 03:52:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1c, 0x0, 0x0) [ 1600.870030][ T7761] binder: 7758:7761 ioctl c0306201 20000080 returned -22 03:52:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1601.090515][ T7771] debugfs: File '7770' in directory 'proc' already present! [ 1601.104520][ T7771] binder: 7770:7771 unknown command 6 [ 1601.110218][ T7771] binder: 7770:7771 ioctl c0306201 20000080 returned -22 [ 1601.121737][ T7760] device nr0 entered promiscuous mode 03:52:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1601.192481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.198642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1601.204967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.211040][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) [ 1601.272327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.278147][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1601.296412][ T7775] debugfs: File '7774' in directory 'proc' already present! [ 1601.314418][ T7775] binder: 7774:7775 unknown command 6 03:52:47 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xad, 0x80000001, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 1601.324591][ T7775] binder: 7774:7775 ioctl c0306201 20000080 returned -22 03:52:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1601.530936][ T7782] debugfs: File '7780' in directory 'proc' already present! [ 1601.572510][ T7782] binder: 7780:7782 unknown command 6 [ 1601.588309][ T7782] binder: 7780:7782 ioctl c0306201 20000080 returned -22 [ 1605.592349][ C0] net_ratelimit: 32 callbacks suppressed [ 1605.598049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.603810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1605.752358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.758195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1605.912337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.918161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1606.712316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1606.718073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1606.792369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1606.798124][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:52:55 executing program 4: write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={'poly1305\x00'}}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 03:52:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 03:52:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x5000000) 03:52:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x80, 0x0, 0x40, 0x5, 0x0, 0x0, 0x4140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x9}, 0x8000, 0x0, 0x0, 0x1, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x200, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, r0, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 03:52:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1609.384186][ T7796] debugfs: File '7793' in directory 'proc' already present! [ 1609.392508][ T26] audit: type=1800 audit(2000001175.929:162): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16737 res=0 03:52:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x5000000) [ 1609.427689][ T26] audit: type=1804 audit(2000001175.939:163): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/891/file0" dev="sda1" ino=16737 res=1 [ 1609.463086][ T7796] binder: 7793:7796 unknown command 6 [ 1609.468495][ T7796] binder: 7793:7796 ioctl c0306201 20000080 returned -22 [ 1609.471146][ T26] audit: type=1804 audit(2000001175.959:164): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/891/file0" dev="sda1" ino=16737 res=1 03:52:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x5000000) 03:52:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) [ 1609.575401][ T26] audit: type=1800 audit(2000001176.069:165): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16801 res=0 03:52:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:52:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:52:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1609.711064][ T26] audit: type=1804 audit(2000001176.069:166): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/892/file0" dev="sda1" ino=16801 res=1 [ 1609.830324][ T7818] debugfs: File '7814' in directory 'proc' already present! [ 1609.834248][ T26] audit: type=1804 audit(2000001176.069:167): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/892/file0" dev="sda1" ino=16801 res=1 [ 1609.853039][ T7818] binder: 7814:7818 unknown command 6 [ 1609.862141][ T26] audit: type=1800 audit(2000001176.199:168): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16609 res=0 [ 1609.872492][ T7818] binder: 7814:7818 ioctl c0306201 20000080 returned -22 [ 1609.899701][ T26] audit: type=1804 audit(2000001176.209:169): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/893/file0" dev="sda1" ino=16609 res=1 [ 1609.934762][ T26] audit: type=1804 audit(2000001176.209:170): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/893/file0" dev="sda1" ino=16609 res=1 [ 1609.959868][ T26] audit: type=1800 audit(2000001176.319:171): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16625 res=0 [ 1610.872335][ C1] net_ratelimit: 28 callbacks suppressed [ 1610.872353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1610.883762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1610.952329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1610.958094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.592297][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.598098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.603877][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.609611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.672353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.678192][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1616.002314][ C0] net_ratelimit: 32 callbacks suppressed [ 1616.002327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1616.013799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1616.152422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1616.158263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1616.322337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1616.328150][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1617.112316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.118090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1617.192309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.198118][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:53:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000056}, 0x98) 03:53:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) 03:53:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) dup(0xffffffffffffffff) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 03:53:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:53:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(0xffffffffffffffff, 0x0, 0x0) 03:53:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1619.275723][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1619.275743][ T26] audit: type=1800 audit(2000001185.819:174): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16737 res=0 03:53:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:53:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) [ 1619.320603][ T26] audit: type=1804 audit(2000001185.849:175): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/895/file0" dev="sda1" ino=16737 res=1 [ 1619.333124][ T7830] debugfs: File '7821' in directory 'proc' already present! 03:53:05 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x300) [ 1619.390685][ T7830] binder: 7821:7830 unknown command 6 [ 1619.408372][ T7830] binder: 7821:7830 ioctl c0306201 20000080 returned -22 03:53:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffa7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x5000000) [ 1619.441192][ T26] audit: type=1804 audit(2000001185.849:176): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/895/file0" dev="sda1" ino=16737 res=1 03:53:06 executing program 3: unlink(0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="dc2ac86d4b66732e66617400080441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0xa800a4, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x24) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000100)={0xb59, 0x7, 0x100, 0x6, 0xa, 0x6}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpgid(r1) getpriority(0x2, r2) 03:53:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1619.612416][ T26] audit: type=1800 audit(2000001185.949:177): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16578 res=0 [ 1619.651222][ T7849] debugfs: File '7848' in directory 'proc' already present! [ 1619.671989][ T7849] binder: 7848:7849 unknown command 25349 [ 1619.716577][ T26] audit: type=1804 audit(2000001185.959:178): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/896/file0" dev="sda1" ino=16578 res=1 [ 1619.752602][ T7849] binder: 7848:7849 ioctl c0306201 20000200 returned -22 [ 1619.763012][ T7855] binder: 7848:7855 unknown command 6 [ 1619.768407][ T7855] binder: 7848:7855 ioctl c0306201 20000080 returned -22 [ 1619.769170][ T26] audit: type=1804 audit(2000001185.959:179): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/896/file0" dev="sda1" ino=16578 res=1 [ 1619.800140][ T26] audit: type=1800 audit(2000001186.109:180): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16625 res=0 [ 1621.272426][ C1] net_ratelimit: 28 callbacks suppressed [ 1621.272438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1621.283860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1621.352351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1621.358154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1621.992316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1621.998128][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1622.003852][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.009605][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1622.072347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.078148][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{}]}) 03:53:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffa7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x5000000) 03:53:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) 03:53:10 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x300) 03:53:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2a, 0x0, 0x0) 03:53:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:53:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffa7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x5000000) [ 1624.427583][ T7858] debugfs: File '7857' in directory 'proc' already present! [ 1624.442195][ T7858] binder: 7857:7858 unknown command 25349 [ 1624.444279][ T26] audit: type=1800 audit(2000001190.979:181): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16818 res=0 [ 1624.461514][ T7858] binder: 7857:7858 ioctl c0306201 20000200 returned -22 03:53:11 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffffd}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x44000020) inotify_rm_watch(r0, r2) 03:53:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x11}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:53:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@umask={'umask'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1624.529870][ T7868] binder: 7857:7868 unknown command 6 [ 1624.547641][ T7868] binder: 7857:7868 ioctl c0306201 20000080 returned -22 [ 1624.595843][ T26] audit: type=1800 audit(2000001191.139:182): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16807 res=0 03:53:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffa7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x5000000) 03:53:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1624.676742][ T26] audit: type=1326 audit(2000001191.219:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7871 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1624.796071][ T7885] debugfs: File '7884' in directory 'proc' already present! [ 1624.815819][ T7885] binder: 7884:7885 unknown command 25349 [ 1624.821780][ T7885] binder: 7884:7885 ioctl c0306201 20000200 returned -22 [ 1624.835066][ T7885] binder: 7884:7885 unknown command 6 [ 1624.840546][ T7885] binder: 7884:7885 ioctl c0306201 20000080 returned -22 [ 1625.423155][ T26] audit: type=1326 audit(2000001191.969:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7871 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 1626.392495][ C0] net_ratelimit: 32 callbacks suppressed [ 1626.398185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1626.403919][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1626.552326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1626.558093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1626.712335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1626.718098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1627.512321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1627.518134][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1627.592353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1627.598213][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:53:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{}]}) 03:53:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffa7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x5000000) 03:53:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\nip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) 03:53:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x11}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:53:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:53:17 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x4, 0x0, 0x3ff, 0x0, 0x1c}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:53:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffa7) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x5000000) [ 1630.821858][ T7897] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1630.836196][ T7901] debugfs: File '7893' in directory 'proc' already present! [ 1630.845269][ T7901] binder: 7893:7901 unknown command 287493 [ 1630.857126][ T7901] binder: 7893:7901 ioctl c0306201 20000200 returned -22 03:53:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x11}, {r0}, {r2}], 0x3, 0x0, 0x0, 0x0) [ 1630.869383][ T7897] IPVS: persistence engine module ip_vs_pe_ [ 1630.869383][ T7897] ip not found [ 1630.882015][ T7901] binder: 7893:7901 unknown command 6 [ 1630.891700][ T7901] binder: 7893:7901 ioctl c0306201 20000080 returned -22 03:53:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:53:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x11}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:53:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[@hopopts], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 03:53:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1631.057203][ T26] audit: type=1800 audit(2000001197.599:185): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16705 res=0 [ 1631.094017][ T26] audit: type=1804 audit(2000001197.629:186): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/903/file0" dev="sda1" ino=16705 res=1 [ 1631.171845][ T26] audit: type=1804 audit(2000001197.679:187): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/903/file0" dev="sda1" ino=16705 res=1 [ 1631.235671][ T7925] debugfs: File '7923' in directory 'proc' already present! [ 1631.247292][ T7925] binder: 7923:7925 unknown command 287493 [ 1631.255555][ T7925] binder: 7923:7925 ioctl c0306201 20000200 returned -22 [ 1631.267824][ T7925] binder: 7923:7925 unknown command 6 [ 1631.273656][ T7925] binder: 7923:7925 ioctl c0306201 20000080 returned -22 [ 1631.672330][ C1] net_ratelimit: 28 callbacks suppressed [ 1631.672342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1631.683777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1631.752340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1631.758140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1632.392348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.398138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1632.403971][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.409708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1632.472386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.478280][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1636.792350][ C0] net_ratelimit: 32 callbacks suppressed [ 1636.792364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.803784][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1636.952377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.958237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1637.122336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1637.128119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1637.912316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1637.918116][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1637.992322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1637.998129][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:53:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[@hopopts], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 03:53:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0x5000000) 03:53:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = dup(r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x1}}, 0x30004081) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) 03:53:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x11}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:53:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:53:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{}]}) 03:53:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0, 0x0) [ 1639.241824][ T7941] debugfs: File '7940' in directory 'proc' already present! [ 1639.257032][ T26] audit: type=1800 audit(2000001205.799:188): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16753 res=0 03:53:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x11}, {r1}], 0x2, 0x0, 0x0, 0x0) 03:53:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) semget(0x2, 0x0, 0xc0) [ 1639.314169][ T7941] binder: 7940:7941 unknown command 6 [ 1639.319629][ T7941] binder: 7940:7941 ioctl c0306201 20000080 returned -22 [ 1639.331528][ T26] audit: type=1804 audit(2000001205.799:189): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/904/file0" dev="sda1" ino=16753 res=1 [ 1639.397648][ T26] audit: type=1804 audit(2000001205.869:190): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir719024783/syzkaller.wKy2Fm/904/file0" dev="sda1" ino=16753 res=1 03:53:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:53:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0, 0x0) 03:53:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000080)) [ 1639.589990][ T7972] debugfs: File '7967' in directory 'proc' already present! 03:53:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40046306, {0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1639.741863][ T7986] debugfs: File '7985' in directory 'proc' already present! [ 1639.950484][ T7949] ================================================================== [ 1639.958628][ T7949] BUG: KCSAN: data-race in wbc_detach_inode / wbc_detach_inode [ 1639.966159][ T7949] [ 1639.968483][ T7949] write to 0xffff888125e68b8c of 2 bytes by task 7944 on cpu 1: [ 1639.976108][ T7949] wbc_detach_inode+0x260/0x550 [ 1639.980984][ T7949] __filemap_fdatawrite_range+0x1d4/0x230 [ 1639.986707][ T7949] filemap_write_and_wait_range+0xb1/0x150 [ 1639.992520][ T7949] generic_file_direct_write+0x27a/0x2e0 [ 1639.998138][ T7949] __generic_file_write_iter+0x17e/0x380 [ 1640.003758][ T7949] ext4_file_write_iter+0x1bd/0xa00 [ 1640.008955][ T7949] do_iter_readv_writev+0x487/0x5b0 [ 1640.014138][ T7949] do_iter_write+0x13b/0x3c0 [ 1640.018710][ T7949] vfs_iter_write+0x5c/0x80 [ 1640.023209][ T7949] iter_file_splice_write+0x4c0/0x7f0 [ 1640.028593][ T7949] direct_splice_actor+0xa0/0xc0 [ 1640.033530][ T7949] splice_direct_to_actor+0x215/0x510 [ 1640.038882][ T7949] do_splice_direct+0x161/0x1e0 [ 1640.043716][ T7949] do_sendfile+0x384/0x7f0 [ 1640.048115][ T7949] __x64_sys_sendfile64+0x12a/0x140 [ 1640.053297][ T7949] do_syscall_64+0xcc/0x370 [ 1640.057782][ T7949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1640.063647][ T7949] [ 1640.065959][ T7949] read to 0xffff888125e68b8c of 2 bytes by task 7949 on cpu 0: [ 1640.073492][ T7949] wbc_detach_inode+0x95/0x550 [ 1640.078240][ T7949] __filemap_fdatawrite_range+0x1d4/0x230 [ 1640.083944][ T7949] file_write_and_wait_range+0xfd/0x160 [ 1640.089472][ T7949] __generic_file_fsync+0x59/0x190 [ 1640.094566][ T7949] ext4_sync_file+0x48e/0xb00 [ 1640.099229][ T7949] vfs_fsync_range+0x82/0x150 [ 1640.103889][ T7949] ext4_file_write_iter+0x45b/0xa00 [ 1640.109066][ T7949] do_iter_readv_writev+0x487/0x5b0 [ 1640.114244][ T7949] do_iter_write+0x13b/0x3c0 [ 1640.118814][ T7949] vfs_iter_write+0x5c/0x80 [ 1640.123304][ T7949] iter_file_splice_write+0x4c0/0x7f0 [ 1640.128658][ T7949] direct_splice_actor+0xa0/0xc0 [ 1640.133586][ T7949] splice_direct_to_actor+0x215/0x510 [ 1640.138972][ T7949] do_splice_direct+0x161/0x1e0 [ 1640.143826][ T7949] do_sendfile+0x384/0x7f0 [ 1640.148226][ T7949] __x64_sys_sendfile64+0x12a/0x140 [ 1640.153407][ T7949] do_syscall_64+0xcc/0x370 [ 1640.157891][ T7949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1640.163753][ T7949] [ 1640.166060][ T7949] Reported by Kernel Concurrency Sanitizer on: [ 1640.172195][ T7949] CPU: 0 PID: 7949 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 1640.179975][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.190007][ T7949] ================================================================== [ 1640.198047][ T7949] Kernel panic - not syncing: panic_on_warn set ... [ 1640.204620][ T7949] CPU: 0 PID: 7949 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 1640.212398][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.222434][ T7949] Call Trace: [ 1640.225714][ T7949] dump_stack+0xf5/0x159 [ 1640.229946][ T7949] panic+0x210/0x640 [ 1640.233840][ T7949] ? vprintk_func+0x8d/0x140 [ 1640.238416][ T7949] kcsan_report.cold+0xc/0xe [ 1640.243002][ T7949] kcsan_setup_watchpoint+0x3fe/0x410 [ 1640.248361][ T7949] __tsan_read2+0x145/0x1f0 [ 1640.252845][ T7949] wbc_detach_inode+0x95/0x550 [ 1640.257597][ T7949] ? wbc_attach_and_unlock_inode+0xdd/0x390 [ 1640.263475][ T7949] __filemap_fdatawrite_range+0x1d4/0x230 [ 1640.269188][ T7949] file_write_and_wait_range+0xfd/0x160 [ 1640.274730][ T7949] __generic_file_fsync+0x59/0x190 [ 1640.279826][ T7949] ? generic_perform_write+0x274/0x320 [ 1640.285280][ T7949] ext4_sync_file+0x48e/0xb00 [ 1640.289954][ T7949] ? __read_once_size.constprop.0+0x20/0x20 [ 1640.295833][ T7949] vfs_fsync_range+0x82/0x150 [ 1640.300497][ T7949] ext4_file_write_iter+0x45b/0xa00 [ 1640.305688][ T7949] do_iter_readv_writev+0x487/0x5b0 [ 1640.310878][ T7949] ? security_file_permission+0x88/0x280 [ 1640.316500][ T7949] do_iter_write+0x13b/0x3c0 [ 1640.321079][ T7949] vfs_iter_write+0x5c/0x80 [ 1640.325570][ T7949] iter_file_splice_write+0x4c0/0x7f0 [ 1640.330946][ T7949] ? page_cache_pipe_buf_release+0x100/0x100 [ 1640.336909][ T7949] direct_splice_actor+0xa0/0xc0 [ 1640.341840][ T7949] splice_direct_to_actor+0x215/0x510 [ 1640.347197][ T7949] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1640.352731][ T7949] do_splice_direct+0x161/0x1e0 [ 1640.357583][ T7949] do_sendfile+0x384/0x7f0 [ 1640.361992][ T7949] __x64_sys_sendfile64+0x12a/0x140 [ 1640.367177][ T7949] do_syscall_64+0xcc/0x370 [ 1640.371667][ T7949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1640.377539][ T7949] RIP: 0033:0x45a219 [ 1640.381422][ T7949] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1640.401004][ T7949] RSP: 002b:00007f564788fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1640.409406][ T7949] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 1640.417366][ T7949] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 1640.425318][ T7949] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1640.433271][ T7949] R10: 0000000005000000 R11: 0000000000000246 R12: 00007f56478906d4 [ 1640.441223][ T7949] R13: 00000000004c7f94 R14: 00000000004de3b0 R15: 00000000ffffffff [ 1640.450701][ T7949] Kernel Offset: disabled [ 1640.455028][ T7949] Rebooting in 86400 seconds..