x8, r5, r6) 13:29:27 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0xfffffffffffffff9, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) rt_sigreturn() 13:29:27 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 13:29:27 executing program 2: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000140)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 13:29:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001a005f0014f9f407000904000a000000000001000100000008001900ffffffff", 0x24) 13:29:27 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r4, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r4, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0xfffffffffffffd66) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x7, 0x396) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x0, &(0x7f0000000a00)) r6 = dup(r5) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000980), &(0x7f0000000580)=0x14) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2e4}}, 0x4001001) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000640)=0x1) r8 = inotify_init() lseek(r8, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) r9 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r9, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000080)=0xffffffffffffff9f) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r10, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @timestamp, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r10, r10) fcntl$setpipe(r10, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000340), &(0x7f00000004c0)=0x40) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00'}) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r12, 0x100, &(0x7f0000000240)="5c010000000000000600006b35d4c055b3d9a5fb292ea1edfcc8b3f73b1474c1697e26d9edf847d512567974d58ffd7ed4d1ecbfa26461b48795537fdca4bc32184c8d09b14d5c6bf5e59638ec3908eff095c6557c321300f7") r13 = socket(0x18, 0x0, 0x3) poll(&(0x7f0000000600)=[{r12}], 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000540)=0xe8) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000580)={'caif0\x00', r14}) r15 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r15, 0x29, 0x4b, &(0x7f0000000200)=0x6, 0x4) bind$inet6(r15, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r15, 0x29, 0x32, &(0x7f0000000500)={@remote, r14}, 0x14) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) 13:29:27 executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="67446698000000000400000003000000209f52afe9e4cfd07b5cf8cd9762139bcddff5f587b6fb484996f6422d573e425b4c86052de1fd2543a3b8d52a858e4d627caf3a87a5e1b58b3be5d855cd04a27a34762d68a708d920303218ef1a4922d54c0970021397225e00000000000000005f05000000000000"], 0x79) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0x13) syz_genetlink_get_family_id$tipc2(0x0) pipe(0x0) pipe(&(0x7f0000000280)) creat(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 13:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 13:29:28 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) rmdir(0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x711, 0x0) r0 = dup(0xffffffffffffffff) read(r0, 0x0, 0xffffffffffffffc9) close(0xffffffffffffffff) getdents64(r0, &(0x7f0000000000)=""/104, 0x68) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1002083) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x2000005) r2 = dup(0xffffffffffffffff) read(r2, 0x0, 0xffffffffffffffc9) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x8) 13:29:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) [ 1048.923871][T28834] binder: 28832:28834 ioctl c0306201 0 returned -14 13:29:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1049.153567][T28942] binder: 28941:28942 ioctl c0306201 0 returned -14 13:29:28 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000}) r5 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="f0c03f3b7f9360df27d55894af7a3c8f16c5463f2b5eb26c66ec2f4ffb34eee5d3f1f02d19ae679eba8f856c139c402c1924a223d8333c44403dd3f758354bec2bca9773637c240e2e9e7a72501342b92dafdc94a4ad1d68234f6bac9f55b1aa71eefb17d5921601313c9e70946bdc917ade1c7206280f45908394b26384248817bdcb1a1da37ab7e6b71b2bb4d528374e53eee241d63192b7acdf2be010a65860b9aad26a6251c568154071adc940aabd929cb8ca4078c345a4ea8eb7fb81ca43f7c45e8e4d8f3064b0ce0a6b", 0xcd, 0xfffffffffffffffe) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0xfffffffffffffff8, {{0x2, 0x4e20, @broadcast}}, 0x0, 0x5, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @broadcast}}]}, 0x30c) r6 = request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\\\x00', 0xfffffffffffffffb) keyctl$link(0x8, r5, r6) 13:29:28 executing program 4: syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140), 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r5 = getegid() syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000700)=""/30, 0x1e}], 0x3, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) bind$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x10000000, 0x1fffff}, 0xc) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000a40)=ANY=[]) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000140)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000680)={0x1}) dup3(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1, 0x80010, r8, 0x0) write$P9_RATTACH(r6, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x80}}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000bcefe4)={0xa, 0x4e20}, 0x1c) setregid(r4, r5) 13:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 13:29:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:29:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x1}, 0xc) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x100000004) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r0, 0x0, 0x2) getpeername$inet(r2, &(0x7f0000000840)={0x2, 0x0, @multicast2}, &(0x7f0000000600)=0x10) r3 = open(&(0x7f00000004c0)='.\x00', 0x40, 0x10) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/48) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000001740)={0x8, "d7d2e8f9c32d6c17e458680e02bf7e8ffe362a56aba6e2d32160d31f2ceb29fe0e146bef21974943492719e0cb74a02da570cb7cbfb0a8c18aa174b08b2055cbeea88c38c8fdd0256f53acce8812bc00f66b64a3da7b3883dfe599f00c596b53575f14fb809eddc8798267b0645dc8411d3182de1ccc1b744f073215c0171d516a3771a9313d01a23fb0e6e33ea80d11d9dd78ca6ec80666855d418ded36ac0d402c0f0f131545204358a4f202a6ff03917fb3b9eb08b2d82db24c3b0c361a133eb98402191d71c8d18adffe9eab739628b1a7656c50e8603935e12c85af51ea95224e9b67e484c8f16e22f6a4c200357507b6506bae18c38cf0201c266b64a7fb77c966bbdfd42c96e98c0ee2553a9a519087b2f3a59ca4d7e48d0241962b7d40038fc631782d11c18aba6024c18c8f4408c3e6e8f2a547a4ff4cca3da2a7243dc6917f60cff731869e279e3ea7e3d3036235d71da4d7d9db0a7a2f5b03760d1dc253b28de9f7950ad01b7bdac4fa3e48b4393a8e5091c1a038825927807214bf2b67265b12ddbc1d90fbb49ece9d6bedacf3bc8b6466999d1620da96b1f7e7ed52d294d77df69b304020be49f5e1bedca6f67f89182fd60e3a79dec1312b02268531bdb88c082e9bc5425c0fcd4c4ca435c5ca9f90cd19784d978e6164b8518ff208d6b1c68a9eb901b04354a4b1341e1a0c10b5c95d91821deb32f8ee1325c30526c6c2dfdc298a733204194a83e69b9e9dab7c12c5308a6c809e7583ff19e4903215b01c280d1a4a6c22e16e57d55736fb1f71691e7ebd6d0e64e8ad6e05aae449538843bd65117eb81b92ba219ba292983be2e574ea180911cf066cb3baa6ec5cf80489bcbb3144197ceeda9275434818ff5970bd18f5ddef476703c20853b3a45ad2d894dae8ba184ecec7ae17858ba827d603d4675d914186d5f49a8b1379e4bcb95c89d5ed49e5a9ec53b2ed5252f5ac0f1001d680ca312d18b548391df1a2761d66e1a95876ebdd3c8a734834a9634e89d3015736cedb03732c1fb78316dff708a1320cca5e31d5376f75922e08bc779eb82c0ffbfa8f9d7a01b1f1602d2a2026fbe9a1ea2710eed8f8f2a5a476be12ce74b80adbd6ae3f3b335dc19f20a1b6c8eedb96ba6a6a1f49e81a28ca8bf69f66997c6242fc77f1d13259ecf7a6d26204f6310feddf63b327e9e3e40c6135b402a0064a55329ade86f6611c136bf9541bb7110bd4a417f4254106054a2e9e4f9ea02e94a0be465b131957d378d20e4a7787827ea2b03d1408f3920611169a8d4c771f38d9358556f075ecebde160a08f6cd355a0685307f2eb8c89eee49510161913565e0687940ac6360cfb0a604839606a50ba69b450bf112f490ee562c30c6ae2882e1dbcf135eae9f32749ccfbf6066901fe7318279d111980d6376d36b5b6e3bd022eb38c7872e5663e4009d94f595535d4f1bb9d8925bbf8e9857acb33955d1f7dc6306d11f04fb192ad634779ed6a253d01e32be0d887f02f765ea4046960853e451f8cb840239a91ad361a765f0373563f23fcc958266770703b6882b6188b42dd9125ca23b0fa6e93228f794dec990bd8837b42809ddfcbbb0177566e0e79c7755438d77255aea957d444f6bc7ae48de0ce028c96aeeaf0a73f280b396063fecb01526c177f93deb5a6a22d00add31b79250171011108e7d7651eded6ab84d64175537ebe1736e8a4a41558b1d4c66a9fae5671b3fd8a318c9a55ef4531f9be996e3ad0fb41b474492b0fe095b89113dfa299ddb0cc624be1cc3a5c235ceedb029b7586d6c9cac8748328cc7e544281a0794251a391ca8b6daadaca4f66bd4278148d18eda95dd7f3aceca1a1aff2a6ec841425c924c2fc28e24bd4ba02ed822ab21a6eb2c400219d65df2e179a2d2b11627303af99468b2d64b006092ff3230f290bacd4674c7a53123dc84150372db3dc7ea5594e0b41da845f66b4ce9a5676cc773e786ca7d1c5d66df644277a106e1758d75924d25768b1daae8e829f14556fdb25a2357e655dcd6f676e5a5f31f50633c0fa45c069f200e6cc2d75432645170d70e712e23fa76cb6da4ff768df27b0c7a78f2e6be9d289ae0f6b9b2ec24f055f8817212507627131de576d2c14b27aaeca1a2bb2c5dde20fd7628936246c2501913c7f8a43bc925ba73f78fd473e1a8e511350a8bf5d849931dfc4a2490934840887a09cd4fbb5e44b34a0211706d8c3ae4836b8334ab6b9479429ce1063ddb9ff1fbc5c1cc914d8524dbbf1609a424f3b78339a479ec42b9601c49c5bdeaddaf5e905d79684f6b4095b3f04f4eeacb22168dd40c1e51e55c32550ddfd6e10fe7ee50ae0a8a5120e3cc0da0b9c3992bd4fb6689c2e3079dac756c955cf3ffacf98faf3c67f9d733839b1f1d8ce485229235c19a5ee90b650258ff99d3cd31ad05771f4b4539c718a34b8c6812ba9b0599e0eb6eead411ec324d8c9bede23508849fd3dc7b3ce27805a7a40291f905181f6370211dc468a7c7b3ebb6bf72614d6c639ae0a786c800f007535a4af597d9612b2456761b8db612252b45f3ecc91894c684a495d6372dd5b16a63f31e76fb6380611e2296f5195298d3e5eba8531b9ceeffcaaf16e4a974f00253d9db2fdbb6acb72083de903710baf3c9703fc0fd925f532fc0ecab79099ea54564cc520ff8e87b39135316fc0f37018818d096bc5afdab6a5347ec1cff7732807ba818246c793b807099af0f6b84fae6c264e53f16013b69a29940f97f26183f46721b2fe6f32417ee3e44d893169b524e7f743fefd8a9883f8f0de8e9175c717510941c029a57d368ee7ebe83ef3432cf7f820eed20ab698b473af15174c52ea2ce57c27e16ecf95207598c60edd09647e7f6b77242bb5677fa9b5f1eac59dfd50fd59d5d11bfa080c89534c3c75c85be9c656ee7d3594850ede6fa5b129bb8376ff8439186ad4342be7017248e645788e3746f7cd693b29449a912fec96b943113523fbc3eaa2c288e36e11f9d83659a9c2c49ef7ea45c5b4c034aaa084ac73c51e7a60ec86adf2498363f9706e9c9d6f715939872f24888ceb15bb05a3a13f8865dd0a0dd682e9efeb2819542131386b983b815673ffc4c02e63534464310ef6789d8f6993adfe28edbf95a9c70ddfc304fca8e77509d803da9856d4707eba0384b97557dadb6a691746a1b3f243c4856207b0a5249625dba0e628a918feef669ab560a54a96e4c92e5e767bd092122a17b51522d5254f22a3add287f0b5d7acc0988ed34dd1940825f9db81d462cac06bcdb147c5c05d948e0397f502f6f4059a2ff4fd342431c62d91948e7ae889b6c787ce36463297f243676bec990f5508efb93d2edf8b076fdf071c6e97f2a069361bfa3571f51b3f08e27e972f7ce5a32758d7513d41a77e8031570d64d3eb4066a7c6d926dffb55bc60bf10169dce84cf27913f99114de7de704f3834026bb4ca1f9bfa0a7184583a726719796edeeb6953a64cc88c3dadc39f6f02710b44fb0641c384ac9fbcc8e07e498ffe2d4aa4f4047b309b064f09739b9bc6ecf20bb36f4a59401e801fd93ad74e14dbf9fe4607a8cf546d2b9fb0dc979e685775253dca9c15846bd4b078d8c640d7ffd50933dd06144764540923702cdf3c3d159ddef0bf96196bd1da94d6b48b4148ebb3d4023be766c4fc4f358066428b483ffeec2688f1ffb3cce8b56542b8d0d165057f32ff693d05eb630d8b196638f5fd7dc46456ed58e436faa115c0e1e20c85439dc30bed063f79f19492552ef45f8b66bc0a15d61ce5b25075ee25e280b8f84aeac49fc031ad6afbd2673ea9a5558f2c05cbb6f50a6ac255d8890e6cd5e1771390e8c5d3869ccd0a67b65c7c4f5fd30891b0084b80828e310dd27e4fe3aef4c06375672e4a32aed9302ce9eea81c9b9cbbfe2d8baa5523932a2f2ea13f681c7a619079582fc2f86ffaf1443b6f560455968188ff434421ebce242fec02a9667b9ddb4a05b9226a0dae286e6017d5df980e3075ed99413c57e3cbc7014faae7192288661760f4c63ae1eb78687d950d6125dbc2d10bfcfad7e02ba91f5b8a27a689a1972e3c86a8860703ebbe9962e38f1d2448124e52450e16bb5d9166fecdaa4e6cf33a3b3a783f209af152b644c745bf6b8453b2c68d1e7fa82a4a31fb439100dc0f131a3127787e1772a46d7942bf026292d60674455d4f49c31b32a4aa880bcef8e5c485722224dfa57cf4c891e049acd2fb457bb80c035a24e3abcc35763ffa975978c23a0cb13f397bb4b79a35371b4c40552a2e0495a0ebfa0545eb106be39f5d24bb931b71aa6e66d531d3d144813c6352a14750aa7d685da4ce24ffceea27c5c7cf71dfbf6d83226d0dfe6171df9edeb248df22fe2c71fe6e3520748c12bba688af9045db8f678dfe41a6aa887cd1b625e104af75c9399d3477934378de9b173e279cbba487ca0166d0af656115b71b8a1147116edd54c3be6e6c275c23489f76926b787e338a99de7c9c9cab0e030c960d051d15d526429ba208ab57eb42fb28bf05c2aed5eab59271ea3fb789ddfed6d719dcedb0c05385c28eb1e1f1dbdfebe1d742d858a00c0130227efc62bc51ca0b801347f5c187798a0c2fa35599d92acf6d4c9e687919332722e18045c0a43f2b12affae721ca34ad027509d6db7dedb016006bc44a815f8461f0ec22e899c7e7117ba4700734484c5564ba0a54b2f02fabbf0706f9b7ad77d6c6afc725a85855f08fb22dbd76d151de51e6e90de90151221f5fe80b2a0af9d1dc72b9ae660bac32ba64fa2096f61acc183af1c501892e50ffa0b9f498e338dd29d4f1ddde5b60136adfd473ccbadd4c3d30ab1b704de42ef539cd4d6ca98e067a67d200d1d0b2fa4f443534da34b595bf25111574016c47f7089e3da3d7a9133e771acc5ef81386f5ee47e5464fca1873d15ea81a857f6d20d0c97f69b66941abd63a141a2230fffe0e35fa070adeda60ebef9ce78c424aa0be394887cc40dfcb8b37b94c9fa7edece4c8a2bb1486b823cd8f68dae5669390c77d9b8f33776c04d7acace1e2330d554a2eef8d260a1c6dcfd508bd2f3a19465b49ed0c0cda3caf018cf5aa3eb82bbf093bea9573e2fe16b137109e7a8252b1befba9623e7b97056d232953033f55b7c03be2106ff61a3dc00206d321aec7a464d350f5d8c9ec0099775517a2d07f0b7d1917a96718389c03fcb7a59ddd4fd2c86306d0daa93ece1cdf89ddb92d072d11abcbaba1ca02929d2378897160f8c5deabc3332beb601e3bf6c74b65061bbdc0322b721b6afc8c0d02220a8684cf3b8da8595c16ff2f7989987a223bdc80cbfe259d2dc822909dcf1ec98abc9da97e2198dfc883977b757eeefc22f4916f6085d47be429d4ec37b6de22d1fba56a8cb2df7e452cfeb67fad9b7e3fb1ff33814197c11141b2294e06a37c88c3c985e5bdfa3af0bd587918c07c36d2b8af4d613c1cc156961909d0049b662079abf4ca1782552dbca6c47e5c81eb5fb99d325da8d0b5de1f30e0a0ec38a11713294fc18c0abd3194d1e6f650a8abceca331a6c247c07a9423e3e960afe3a55475e8f860266c0c5214dded86329a51ffb9e5cf1f075d9e832b8fb15a71ab89b2edb4c67052cc5d69573a6754c3b997435b42b6dcfff42c94de803ab1ff0f85079b605bc67c4cb0ebae884c17deae08d7a99ff9f0ff1750429533c6024a508b8165ac1ca993b9236abcead086fcfe0aa4da6dceda36663048e195690969462fd9f3c8867fec378539d4d035342732d1ae582ab58d", 0x1000}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000002940)={0x5, 0x1, 0x0, 0x0, 0x5}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000001c0)=0x10000) sendmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7a66d863014bb0d6ad22"], 0xa}}], 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00') write$P9_ROPEN(r2, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x2, 0x1, 0x3}, 0x200}}, 0x18) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000003880)={0x9, 0x0, 0x8, 0x1f}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x7fe, 0x0) renameat2(r1, &(0x7f0000000540)='./file0\x00', r4, &(0x7f0000000580)='./file0\x00', 0x6) write$P9_RVERSION(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1bf) 13:29:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1049.395524][T28949] binder: 28948:28949 ioctl c0306201 0 returned -14 13:29:28 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) eventfd2(0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0) ptrace(0x10, r1) pipe(&(0x7f0000000240)) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000140)) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 13:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 13:29:29 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, './cgroup.cpu\x00'}]}, 0x19) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 13:29:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:29:29 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 13:29:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(r1, &(0x7f0000000300), 0x291, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 13:29:29 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="f0c03f3b7f9360df27d55894af7a3c8f16c5463f2b5eb26c66ec2f4ffb34eee5d3f1f02d19ae679eba8f856c139c402c1924a223d8333c44403dd3f758354bec2bca9773637c240e2e9e7a72501342b92dafdc94a4ad1d68234f6bac9f55b1aa71eefb17d5921601313c9e70946bdc917ade1c7206280f45908394b26384248817bdcb1a1da37ab7e6b71b2bb4d528374e53eee241d63192b7acdf2be010a65860b9aad26a6251c568154071adc940aabd929cb8ca4078c345a4ea8eb7fb81ca43f7c45e8e4d8f3064b0ce0a6b", 0xcd, 0xfffffffffffffffe) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0xfffffffffffffff8, {{0x2, 0x4e20, @broadcast}}, 0x0, 0x5, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @broadcast}}]}, 0x30c) request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\\\x00', 0xfffffffffffffffb) 13:29:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:29:29 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)) 13:29:29 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, './cgroup.cpu\x00'}]}, 0x19) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 13:29:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) 13:29:29 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)) 13:29:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x43732e5398416f1a}) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:29:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) 13:29:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)) 13:29:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="290000002100190000003fffffffda2602005d8f9ddc20000ae80001040006000000141f000014e813", 0x29}], 0x1) 13:29:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 13:29:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) [ 1050.884490][T29396] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 13:29:30 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="f0c03f3b7f9360df27d55894af7a3c8f16c5463f2b5eb26c66ec2f4ffb34eee5d3f1f02d19ae679eba8f856c139c402c1924a223d8333c44403dd3f758354bec2bca9773637c240e2e9e7a72501342b92dafdc94a4ad1d68234f6bac9f55b1aa71eefb17d5921601313c9e70946bdc917ade1c7206280f45908394b26384248817bdcb1a1da37ab7e6b71b2bb4d528374e53eee241d63192b7acdf2be010a65860b9aad26a6251c568154071adc940aabd929cb8ca4078c345a4ea8eb7fb81ca43f7c45e8e4d8f3064b0ce0a6b", 0xcd, 0xfffffffffffffffe) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0xfffffffffffffff8, {{0x2, 0x4e20, @broadcast}}, 0x0, 0x5, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @broadcast}}]}, 0x30c) 13:29:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x21, &(0x7f0000000000), 0x3) 13:29:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)) 13:29:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper], 0x0, 0x0, 0x0}) 13:29:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000380)={'raw\x00\x00\x00\x00\x00\a\x00', 0x4, [{}, {}, {}, {}]}, 0x64) 13:29:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="3900000010000900006c00ae7aa77cf40000e73f080017d445009db9120c007b05000300000068849ef72da102159affff55e91ee538d2fd00", 0x39}], 0x1) 13:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)) 13:29:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2e) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 13:29:31 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) fcntl$getown(r0, 0x9) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000380)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) getsockname(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80) flistxattr(r1, 0x0, 0xffffffba) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000440)=""/242, 0x50c7e725) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r3, 0x0, 0x4000000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r4 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000016c0)) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x0, 0x6, 0x0, [], [{0x3, 0x8000, 0x26, 0x2, 0xd1e, 0x4}, {0x5, 0x9, 0x9, 0x4, 0x0, 0xc00000000}], [[], [], [], [], [], []]}) fchdir(r5) write$eventfd(r2, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="eb5e185422c7f05c00005760e587f0bcbad480000f0d611da2f39514dbf14285746cf7689e83ee4a485e"], 0x2a) sendfile(r6, r6, &(0x7f0000000180), 0x8000) write$P9_RREADDIR(r4, 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000003c0)) [ 1051.752333][T29451] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 13:29:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper], 0x0, 0x0, 0x0}) 13:29:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x12fa88) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) wait4(0x0, 0x0, 0x0, 0x0) 13:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)) 13:29:31 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="f0c03f3b7f9360df27d55894af7a3c8f16c5463f2b5eb26c66ec2f4ffb34eee5d3f1f02d19ae679eba8f856c139c402c1924a223d8333c44403dd3f758354bec2bca9773637c240e2e9e7a72501342b92dafdc94a4ad1d68234f6bac9f55b1aa71eefb17d5921601313c9e70946bdc917ade1c7206280f45908394b26384248817bdcb1a1da37ab7e6b71b2bb4d528374e53eee241d63192b7acdf2be010a65860b9aad26a6251c568154071adc940aabd929cb8ca4078c345a4ea8eb7fb81ca43f7c45e8e4d8f3064b0ce0a6b", 0xcd, 0xfffffffffffffffe) 13:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r1}, &(0x7f0000000080)) 13:29:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper], 0x0, 0x0, 0x0}) [ 1052.145755][T29674] ptrace attach of "/root/syz-executor.1"[29671] was attempted by "/root/syz-executor.1"[29674] 13:29:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x58, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 1052.244395][ C1] net_ratelimit: 16 callbacks suppressed [ 1052.244404][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.244439][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1052.250118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1052.250210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.273183][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r1}, &(0x7f0000000080)) [ 1052.414360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.420347][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:31 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r1}, &(0x7f0000000080)) 13:29:32 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x100000008005) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x100000008005) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x100000008005) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x100000008005) socket$netlink(0x10, 0x3, 0x3) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x100000008005) sendfile(r9, r10, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x6, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r15, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001600)={0x0, {{0xa, 0x4e21, 0x7, @remote, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x3, @empty, 0x4}}, {{0xa, 0x4e22, 0x5, @loopback, 0x5}}]}, 0x18c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$VT_ACTIVATE(r14, 0x5606, 0x85) sendto$inet(r15, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clone(0x8001200, &(0x7f0000000140)="74d487f5e2da0ec6f05206525712f90a", &(0x7f00000001c0), &(0x7f0000001400), 0x0) setsockopt$sock_int(r15, 0x1, 0x8, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) tee(r17, r16, 0x8, 0x0) connect$unix(r17, &(0x7f0000000380)=@file={0xfd1fb7bbf091c218, './file0\x00'}, 0x6e) write$binfmt_elf64(r15, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r15, 0x1) recvmsg(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(0xffffffffffffffff, &(0x7f00000017c0)="dfdf9caf58731f99dbe1923d1f32e19d9f87fbc2a06a9186d629dd76cfce4488f3a91a9fcff3d6d13ab5c01feddcb8e26d79a5ed51644413880f0df9f1c189181f96bd22e0b6f11f809d0871cc0333cd6c557178f63fe9204ef59c82fddbd43af3572e9bbcac7e2e09de25029ac36c88ae99c4ea5a61084a8ec89a28d8420599c5e247f0c3154b06478bf75a1b214363906f6d17cfb84fd782eb6fec60dda2c512f9bc41b959b3bacae1620e36bfd2bc0dcadfe399997a490f65c8bc92ae037940dfd0692eb75dc7613075f13585c1aba15ac0879d8d894713e00a8eb1099f85837f1a1939c46c087f6e7430e3525e57d79b2611124d50038a30a57d677dbe6581daedc84acc47faa4fa07baf486cbba48941d3adde0ec5628aa6122ca80f09564ab89c3462b42cb026e725338ee8b3a29a66ddd03b3c48b8722ad72c05cf91706ab02dad9ac4e225209bf50d17a67fec598eb5c23d7205dabc14c1c25b2c8eb58589836182ecb47fbb529515eb2271bcae9027e76dcf82c896836f2d23cccc80eb2659d21cb598059cf4f9aa55e8845ad08c0f7a1ec75a4185db5c91cd14cfa", 0x1a0) write$eventfd(r14, &(0x7f0000000340)=0x2, 0x8) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000001480)={0x0, @empty, @dev}, &(0x7f00000014c0)=0x1) read(r13, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000001440)={0x1, 0x6, 0x1000}, 0x4) 13:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)) 13:29:32 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r4+30000000}) 13:29:32 executing program 1: mmap(&(0x7f0000039000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 13:29:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:32 executing program 1: r0 = memfd_create(&(0x7f0000000040)='/dev/aut*Sofs\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000035) fcntl$setstatus(r1, 0x4, 0x80000000002c00) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) 13:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)) 13:29:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) [ 1053.044364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.050251][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:32 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:32 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)) [ 1053.303889][T29931] ptrace attach of "/root/syz-executor.1"[29930] was attempted by "/root/syz-executor.1"[29931] [ 1053.444400][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:29:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x100000008005) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x100000008005) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x100000008005) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x100000008005) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x100000008005) socket$netlink(0x10, 0x3, 0x3) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x100000008005) sendfile(r9, r10, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x6, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r15, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001600)={0x0, {{0xa, 0x4e21, 0x7, @remote, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x3, @empty, 0x4}}, {{0xa, 0x4e22, 0x5, @loopback, 0x5}}]}, 0x18c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$VT_ACTIVATE(r14, 0x5606, 0x85) sendto$inet(r15, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clone(0x8001200, &(0x7f0000000140)="74d487f5e2da0ec6f05206525712f90a", &(0x7f00000001c0), &(0x7f0000001400), 0x0) setsockopt$sock_int(r15, 0x1, 0x8, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) tee(r17, r16, 0x8, 0x0) connect$unix(r17, &(0x7f0000000380)=@file={0xfd1fb7bbf091c218, './file0\x00'}, 0x6e) write$binfmt_elf64(r15, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r15, 0x1) recvmsg(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(0xffffffffffffffff, &(0x7f00000017c0)="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", 0x1a0) write$eventfd(r14, &(0x7f0000000340)=0x2, 0x8) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000001480)={0x0, @empty, @dev}, &(0x7f00000014c0)=0x1) read(r13, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000001440)={0x1, 0x6, 0x1000}, 0x4) 13:29:33 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r1}, 0x0) 13:29:33 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:33 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:33 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) clock_gettime(0x0, &(0x7f0000000900)) 13:29:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000001100), 0x11e5) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000380)={r1, r2/1000+10000}, 0x13) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write(r4, &(0x7f00000000c0)="f7", 0x1) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r7 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r7, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000180)=0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000200)={@loopback, @loopback}, &(0x7f0000000240)=0xc) 13:29:33 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:33 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='security%+ppp0:wlan1wlan0.-}vmnet1:@system\x00', r3) 13:29:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast1}, 0x14) 13:29:33 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:33 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:33 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x15cgroupcpusetselinux\x00', 0xfffffffffffffffc) 13:29:34 executing program 0: clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpgid(0x0) syz_open_procfs(r1, 0x0) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x9) 13:29:34 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:34 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:34 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 13:29:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0xc0008, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/184, 0xbfcc8116) tee(r0, r2, 0x80, 0x0) 13:29:34 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) fchdir(0xffffffffffffffff) 13:29:34 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rt_sigpending(&(0x7f0000000a40), 0x8) [ 1055.132359][T30103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1055.168091][T30103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 13:29:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000040)) fcntl$lock(r1, 0x26, &(0x7f0000000080)) dup2(r0, r1) 13:29:34 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 13:29:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) read(r1, &(0x7f00000000c0)=""/131, 0x83) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 13:29:34 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) fchdir(0xffffffffffffffff) 13:29:34 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r2}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 13:29:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x2071dff6) 13:29:34 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 13:29:34 executing program 5: r0 = socket$inet6(0xa, 0x20000000080002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) read(r0, &(0x7f0000000080)=""/132, 0x397) shutdown(r0, 0x0) [ 1055.507517][T30303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 13:29:35 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) fchdir(0xffffffffffffffff) 13:29:35 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f00000fc000)={0x19980330, r1}, &(0x7f000047efe8)={0x0, 0xff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:35 executing program 0: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000003c0)="eb900d9d4f80d0643e6a119761b02e7ab6bda3cc8e7117e4ccfa1740afe8fdaf7bdbfe73a0f701cc68ec49ff7cd27f8dc8dd0191f2b648de5959bda88ffeaac63ca761efd0456672b104a3a6aeffc058209ee972dcd08a9d9b21b12df9084f1feb17ded04e925fc79a6e8c6876ceca0a6dccd36bbe6eb297fd618a6d78d3e823c32abaa000205d442703d3b0d28e1b2d7122c220dc5e8140cb29f99e4c798b4eee736389207ed2156854ac88a184dc67f0764d0ac8ddc4f1680656dac5733a0c69f81d5bb728d54cfd3be5c517a0cd74b6a4db80ecbac3f6b9f60a63e5620936cd2c7f84", 0x23b60739) write$evdev(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x825e, 0x4) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETAW(r2, 0x5408, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000380)) fadvise64(0xffffffffffffffff, 0x100000000, 0x9, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) clock_gettime(0x10000, &(0x7f0000000140)) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:29:35 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) [ 1055.836021][T30402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 13:29:35 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x4}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 13:29:35 executing program 4: capset(0x0, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:35 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) socket$inet(0x2, 0x4000000000000801, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:35 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) fchdir(0xffffffffffffffff) 13:29:35 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:35 executing program 4: capset(0x0, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:35 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) socket$inet(0x2, 0x4000000000000801, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) [ 1056.188585][T30517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 13:29:35 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'sit0\x00\r\x00\x00\x00\x02\x00'}, {0x20, 'sit0\x00\r\x00\x00\x00\x02\x00'}, {0x20, 'sit0\x00\r\x00\x00\x00\x02\x00'}, {0x20, 'sit0\x00\r\x00\x00\x00\x02\x00'}], 0xa, "ee24d934f0"}, 0x40) 13:29:35 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) [ 1056.446005][T30576] IPVS: ftp: loaded support on port[0] = 21 [ 1056.465857][T30586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1056.499257][T30587] input: syz1 as /devices/virtual/input/input128 13:29:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x400000)=nil, 0x400000, 0x100000a, 0x11, r4, 0x1d) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) 13:29:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)={0x0, 0x40000000000002, 0x2, 0x0, 0x1, [{}]}) 13:29:36 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) getcwd(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:36 executing program 4: capset(0x0, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:36 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:36 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) [ 1056.759993][T30692] IPVS: ftp: loaded support on port[0] = 21 13:29:36 executing program 4: capset(&(0x7f0000560ff8), &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:36 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x5f, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) [ 1056.892860][T30715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 13:29:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000200)="f0865f197a3b0aa6a336838e2df755f4", 0x10) 13:29:36 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:36 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 13:29:36 executing program 4: capset(&(0x7f0000560ff8), &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:36 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x1}, 0x1c) ioctl(r0, 0x707, &(0x7f0000000000)) 13:29:36 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:36 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 13:29:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:36 executing program 4: capset(&(0x7f0000560ff8), &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:36 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:36 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 13:29:36 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:37 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) [ 1057.604361][ C0] net_ratelimit: 22 callbacks suppressed [ 1057.604370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1057.615923][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:37 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000000000)="0271e53baee66a4097f67e41ba579ef476627f76b2455f931f32e0d62998eab9602e0abf53922b7bfeaef9c37d1bef8199", 0x31}, 0x68) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 13:29:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:37 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000000c0)) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:37 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:37 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r2, 0x40000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:37 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:37 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:37 executing program 5: write(0xffffffffffffffff, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r2, 0x40000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:37 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:37 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 13:29:37 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:37 executing program 5: write(0xffffffffffffffff, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) [ 1058.484385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.484432][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1058.490185][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1058.496015][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.507472][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:37 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:37 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:38 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:38 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) [ 1058.644467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.650350][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r2, 0x40000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:38 executing program 5: write(0xffffffffffffffff, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:38 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc) 13:29:38 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) 13:29:38 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:38 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:38 executing program 5: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:38 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) 13:29:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r2, 0x40000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:38 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:38 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:38 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) 13:29:38 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) [ 1059.284356][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:29:38 executing program 5: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r2, 0x40000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:38 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:38 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffff52) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 13:29:38 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) 13:29:39 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:39 executing program 5: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r2, 0x40000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:39 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:39 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100), 0xc) 13:29:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00'}) 13:29:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r1, 0x40000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:39 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:39 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100), 0xc) 13:29:39 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) [ 1060.116136][T31405] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 13:29:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:39 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:39 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:39 executing program 3: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000080)="a858", 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040), 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140)=""/249, &(0x7f0000000000)=0xf9) 13:29:39 executing program 4: capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100), 0xc) 13:29:39 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:39 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:39 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x200000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000680)=ANY=[@ANYBLOB='broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="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"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000001f00"/164], 0xf0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0xf4}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000000c0)=0x1) fchdir(r2) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r5, 0x208200) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x81) syncfs(r4) ioctl$FS_IOC_SETFLAGS(r7, 0x40046602, &(0x7f0000000240)=0x2) 13:29:39 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:40 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:40 executing program 3: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) dup2(r1, r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r3, 0x0, 0x1040080000000, &(0x7f0000000080)) 13:29:40 executing program 5: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:40 executing program 5: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:40 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(0xffffffffffffffff, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:40 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:40 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000015c0)={0x6, 0x1f}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x20000000000002ca) 13:29:40 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:40 executing program 5: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) 13:29:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000000000)=[0x0, 0x30000000]) 13:29:40 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(0xffffffffffffffff, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:40 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:40 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, 0x0, 0x0) 13:29:40 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(0xffffffffffffffff, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:40 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 13:29:40 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'tu\xa1\xc3\x11` _\xd6\xb8\x00', @ifru_mtu=0x10001}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 13:29:41 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, 0x0, 0x0) 13:29:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:41 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0) 13:29:41 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, 0x0, 0x0) 13:29:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:41 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x30, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) 13:29:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x4000030000000304, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:41 executing program 3: seccomp(0x0, 0x2b2c6cc6f493db8c, 0x0) 13:29:41 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040), 0x0) 13:29:41 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 13:29:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040), 0x0) 13:29:42 executing program 3: r0 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0004000000000000000002800000000000", 0x24}], 0x1}, 0x0) [ 1062.644391][ C0] net_ratelimit: 15 callbacks suppressed [ 1062.644399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.654452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.655903][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.661585][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.673908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.679754][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:42 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) [ 1062.814427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.820321][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:42 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:29:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040), 0x0) 13:29:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff}) unshare(0x400000000400) read(r0, 0x0, 0x0) 13:29:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 13:29:42 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402df", 0x12) 13:29:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 13:29:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000240)) 13:29:42 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) fcntl$setlease(r0, 0x6, 0x2070dff1) 13:29:42 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402df", 0x12) 13:29:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) [ 1063.444370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.450203][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:42 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(0x0, 0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000280)=0x8) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000440)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getgroups(0x0, &(0x7f0000001cc0)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@local, 0x24, r0}) getsockname$inet(r1, &(0x7f0000000540)={0x2, 0x0, @empty}, &(0x7f0000000580)=0x10) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x400801, 0x10) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000400)=@req3={0x200, 0x3, 0x9, 0x2, 0xfff, 0x14, 0x4}, 0x1c) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000000000)) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x11, &(0x7f00000002c0)={{{@in6=@local}}, {{}, 0x0, @in6=@mcast2}}, 0xe8) getgroups(0x4, &(0x7f0000000040)=[0xee00, 0x0, 0xee00, 0xee00]) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x8) 13:29:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:43 executing program 4: futex(&(0x7f0000000040), 0xb, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7ffffffff000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14}, 0x14}}, 0x20040084) 13:29:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402df", 0x12) 13:29:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:43 executing program 3: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:29:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, '\xecJ\x00\x965\x00'}) 13:29:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000", 0x1b) 13:29:43 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 13:29:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r3, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) 13:29:43 executing program 3: r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffef4) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000e80), 0x63b69822cd6bb5d6) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r3, r4, 0x21, &(0x7f0000000140)={0x1c, 0x8, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='\x04\x14u=\x84C\xdf\x80s', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x3, 0x4) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r9) unlinkat(r8, &(0x7f0000000240)='./file0\x00', 0x200) 13:29:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000", 0x1b) 13:29:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:43 executing program 4: clock_gettime(0xfffffffffffffff0, &(0x7f0000000100)) 13:29:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000", 0x1b) 13:29:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:44 executing program 0: getgroups(0x2, &(0x7f0000000000)=[0x0, 0xee01]) setresgid(0x0, 0x0, r0) 13:29:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x46a100, 0x0) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)="390000001000050468fe07002b00e8ff4000ff07140000a8e44cfd0a03a2881419001200120001000300"/57, 0x39}], 0x1) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 13:29:44 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00", 0x20) 13:29:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28}, 0x28) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18}, 0xff79) [ 1064.753674][ T969] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 13:29:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x67, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0x7}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x20000, 0x0) fcntl$dupfd(r2, 0x0, r1) 13:29:44 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:44 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)={0x40000001}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 13:29:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00", 0x20) 13:29:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0xc, 0x0, 0x7}], 0xc}, 0xfffffffffffffffc) [ 1065.062720][ T1195] input: syz0 as /devices/virtual/input/input130 13:29:44 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 13:29:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:44 executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="3e000000000000e5"], 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x30) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 13:29:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00", 0x20) 13:29:44 executing program 3: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 13:29:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x0, 0x2000000229, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) splice(r2, 0x0, r1, 0x0, 0x3cceb668, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f00000043c0)=""/4096}], 0x200000000000002c) readv(r0, &(0x7f0000000580), 0x3c1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) fcntl$setown(r0, 0x8, r3) socket$inet(0x2, 0x2, 0x2000000003) syncfs(0xffffffffffffffff) r4 = getpid() wait4(r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000300)='setgroups\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r6, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') socketpair$unix(0x1, 0x8005, 0x0, &(0x7f0000000480)) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8004}], 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000080)}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, 0x0) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000640)) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = getpgrp(0xffffffffffffffff) wait4(r9, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x40000010000013) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) 13:29:44 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 13:29:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed7", 0x22) 13:29:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x16) 13:29:45 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 13:29:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x191}], 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000ec0)=""/223, 0xdf}], 0x1, 0x0, 0x0, 0x7}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x8001}}, {{0x0, 0x0, &(0x7f0000002840)=[{0x0}], 0x1}}], 0x3, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001940)="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", 0xf05}], 0x1}, 0x0) 13:29:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed7", 0x22) 13:29:45 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xfffffffffffffffb, 0x4) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) [ 1066.071353][ T1566] IPVS: ftp: loaded support on port[0] = 21 13:29:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:45 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) 13:29:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed7", 0x22) 13:29:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) [ 1066.473532][ T1561] IPVS: ftp: loaded support on port[0] = 21 13:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000530ff8)=0x4) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000093a000), 0x4) 13:29:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed700", 0x23) 13:29:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000180)=[{r1, 0x83d5}], 0x1, 0x410080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) 13:29:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0x0, r3}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) close(r0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r2) 13:29:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed700", 0x23) 13:29:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:46 executing program 2: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@proc, 0x5) 13:29:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2002) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 13:29:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed700", 0x23) 13:29:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(0x0, 0x0) umount2(&(0x7f00000003c0)='./bus\x00', 0x0) memfd_create(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000140)={0x30, 0x5, 0x1, 0x1, 0x448, 0x9, 0x5, 0x6}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/ip_vs_stats_percpu\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000300)=0xfffffffffffffffa) unlink(&(0x7f0000000480)='./bus\x00') write(r5, &(0x7f00000001c0), 0xffffffe0) read(r4, &(0x7f0000000200)=""/250, 0xffffffffffffff20) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000440), 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000001c0)=0x4ac2, 0x4) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1b) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x8, 0x8, 0x9, 0xb5, 0xffffffffffffffff}, 0x14) ftruncate(r7, 0x200005) sendfile(r6, r7, 0x0, 0x8000ffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @dev, 0x2}, 0xfffffda2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x7868) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x20000000000480, 0x0) 13:29:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045565) 13:29:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000000030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:46 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000000040)) 13:29:46 executing program 3: unshare(0x400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x3bd, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 1067.420112][ T2164] input: syz1 as /devices/virtual/input/input132 13:29:46 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000, 0x0) [ 1067.596567][ T2170] input: syz1 as /devices/virtual/input/input133 13:29:47 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0) 13:29:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:47 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 13:29:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f0000000240)) 13:29:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x80000000000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, &(0x7f0000000280)) 13:29:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) [ 1068.004368][ C0] net_ratelimit: 24 callbacks suppressed [ 1068.004376][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.015947][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000001d00)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ppoll(&(0x7f0000000080)=[{r1}, {r0, 0x4240}], 0x2, 0x0, 0x0, 0x0) 13:29:47 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:47 executing program 2: prctl$PR_SET_MM_MAP(0x35, 0xe, &(0x7f0000001100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) 13:29:47 executing program 3: clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceeca1, 0x0, 0x0, 0xffffffffffffffae) pipe(&(0x7f0000000000)) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xffffff52) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) get_thread_area(&(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x1000000000013) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$setsig(0x4203, r4, 0x80000001, &(0x7f0000000100)={0x3d, 0x0, 0x851d}) getpriority(0x3, r4) 13:29:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r2 = inotify_init1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/de\x01\x00\x03\x00\x00\x00dun\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffffffffffeb0) epoll_pwait(r4, &(0x7f0000000300)=[{}, {}], 0x2, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendfile(r3, r2, 0x0, 0x8000000003) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00\xf8\b\xbe\xdeRB\x10d\x9b5\xe0\xa42NTr\x9e\xb6\x97\xd1\x0f\x04\xf7N]\xa2\x02B35\xbb\xedv\x8f\xad\xa6# \x11\x9chB\xd7\xefu_S\x81\xf6s') remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xdff, 0x10000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x14) fcntl$getownex(r5, 0x10, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x100) write$binfmt_aout(r1, &(0x7f0000001a40)=ANY=[@ANYBLOB="08010007a30000007d000000ffffff7f3e0100000500000000000000000000008394efd2b7dde50bbc9c50fdba8d3e8638db0d5dba23ffa019ae7bfe708144de9ff74e3ebef59c629bfc83e6f9ee66fa000000000000000000000100000000f62df1cab2f943d25567178df32226170000f7ccfa6851b9da767cfb6580493834530000000000000000000000000000000000000000000000000000000000000000b5ee54de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000d169409d086ba3a54c1c7ff0903bab0765211205983d3919921d313502d4327f555ffb970d2ed7654d10447e9778a4b2ad9503a58abfed90a3d619"], 0x15c) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r6, r7, 0x0, 0x5a92) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f00000001c0)) ioctl$BLKGETSIZE(r4, 0x1260, 0x0) sendfile(r7, r7, &(0x7f00000000c0), 0xbf99) 13:29:48 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) [ 1068.691431][ T2629] input: syz1 as /devices/virtual/input/input134 13:29:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x101000, 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = socket(0xa, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x2e, 0x0, &(0x7f0000000080)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x200) ftruncate(r1, 0x3bb7) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffebf}, 0xfffffffffffffe93) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r5}) [ 1068.812735][ T2819] input: syz1 as /devices/virtual/input/input135 13:29:48 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:48 executing program 5: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@local}) 13:29:48 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001680)=""/4096, 0x1000, 0x0) [ 1068.884374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.884417][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1068.890177][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1068.896008][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.907495][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)="96", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) [ 1069.044409][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.050303][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:48 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000018c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'\f\x03U\b\xbc\xc8v\x14\xae\x8d3\"\xfc\\\x86\xc8\xe5\xe8\x14&.\xf7\xc1\x1fY\x9d\xa4\xb5\xefF\xe9\xeex\x80\x86$\xadw\xef\xd8o\\O<;%\x14\xdc(YW\xf0,\xd8\xf2d;\x86NK\\\xa3/Z\xd9)LvEYe\xd9\x97\xb3^\xe5H\x96\xe2p\xc7\xe3\x1d\xd1_\x8f\xf0\xce\x00\x97Sn\x83\xd1\x92\xd4\xa1\xcck\x1d\x93`\xc6e\xa5rw\x9a\xc4\xd6&') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00\a\xa5B') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) 13:29:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)="96", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) 13:29:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001500197ef7004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8ca7ae71af96fddc9f2600d4ff5bffff9b226452", 0x48}], 0x4) 13:29:48 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r6, &(0x7f00000004c0)={0x18, 0x7, 0x2, {{0xb, 'cpusetwlan0'}, 0x5}}, 0x18) sendfile(r6, r6, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r8, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r7, 0x0, 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) gettid() ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000980)={0x0, 0x0, 0x8, 0x0, [], [{0x2, 0x7, 0x101, 0x1000, 0x8, 0x3}, {0x90, 0x0, 0x10001, 0x1, 0x4, 0x2}], [[], [], [], [], [], [], [], []]}) 13:29:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)="96", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) 13:29:49 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 1069.684450][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:29:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x8000}) 13:29:49 executing program 4: syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000, 0x0) 13:29:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)="96", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) 13:29:49 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket(0xa, 0x0, 0x0) fcntl$notify(r1, 0x402, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) 13:29:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, 0x0, 0x0, 0x0) 13:29:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x3ff, 0x8be4be1679376bd6) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:29:49 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 13:29:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 13:29:49 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x420a, r0, 0x8, 0x0) 13:29:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) 13:29:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, 0x0, 0x0, 0x0) 13:29:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 13:29:50 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 13:29:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:50 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 13:29:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x38f4168b7592eaea, 0xed13f8ac3df0acdb, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') dup2(r1, r0) 13:29:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 13:29:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ptype\x00\xa8\x19Al\f()\xfb}\xe8+\x89\x90h\xfdY\xc0:\xd9\x11\\?\x14\xe4\xff\x13\xe0$\xa0\xd2|\xd6\x03T\x9a]p\xab\x9d\xbb\xf8\xa0\x8d\xc3\xbb\xe7\x01I\xe8\x04i\x03\xb9K\xb5L[\x14l\xe7') pread64(r0, 0x0, 0x0, 0x0) 13:29:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:50 executing program 2: clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) getpriority(0x0, r1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 13:29:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 13:29:50 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x499, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0x27c}], 0x1, &(0x7f0000003780)=""/232, 0x1fb}}, {{&(0x7f0000003880)=@xdp, 0x80, &(0x7f0000000040), 0x8a, &(0x7f00000039c0)=""/111, 0x6f}}], 0x8000078, 0x2, &(0x7f0000003bc0)={0x0, r3+30000000}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/43) syz_genetlink_get_family_id$tipc2(0x0) io_setup(0x1ff, &(0x7f0000000040)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="fcc1f1b843171ac153144cde3334eccc", 0x10) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000001c0)=0x7) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYBLOB]) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 13:29:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmmsg(r0, &(0x7f0000000440), 0x80000000000007f, 0x0) 13:29:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) [ 1071.510605][ T3550] cgroup: fork rejected by pids controller in /syz2 13:29:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:51 executing program 5: futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) 13:29:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f00000000c0)=[@acquire, @request_death, @decrefs={0x400c630e}], 0x0, 0x0, 0x0}) 13:29:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:51 executing program 4: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) 13:29:51 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) 13:29:51 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}, @ssrr={0x89, 0x3, 0xf1}]}}}], 0x18}}], 0x1, 0x0) 13:29:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fcntl$setflags(r2, 0x2, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000380)={0xe10b, 0x37d, 0xb2, 0x8, 0xb, 0x6f, 0x5, 0x1, 0x76ce02ea}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x2000, 0xe0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) gettid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000940)) 13:29:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) creat(0x0, 0x29) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 13:29:51 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:51 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:51 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x400000000000024) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 13:29:51 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:51 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:51 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xff33) lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000600)) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fchownat(r5, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) 13:29:51 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 13:29:52 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) [ 1072.716732][ T4380] Error parsing options; rc = [-22] 13:29:52 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) 13:29:52 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:52 executing program 4: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0xe8, 0x0) sendfile(r1, r2, 0x0, 0xeed604e) 13:29:52 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) [ 1073.044369][ C1] net_ratelimit: 15 callbacks suppressed [ 1073.044378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.044416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1073.050197][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1073.067501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.073255][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:52 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 13:29:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:52 executing program 5: creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') [ 1073.204388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.210286][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:52 executing program 2: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x800000000000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={@dev}, 0x0) 13:29:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:52 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 13:29:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) write$binfmt_misc(r1, &(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0xfffffe80) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:29:52 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:52 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 13:29:52 executing program 5: creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:52 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x1}) 13:29:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:52 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1'}, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x2000000000000156, 0x20000ffa) 13:29:53 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) 13:29:53 executing program 5: creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:53 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) [ 1073.844361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.850229][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:53 executing program 2: r0 = memfd_create(&(0x7f0000000180)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf\xd6\xb2n\xe1\x82\xd6\xb3\x1a\x98H\x06l\x0e\xa0\xa23\xba\nB\x87v\xaa\xe0\xec\xcb\xaf\xe7y\x87\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xcd{1uj1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0U:\xe3\xc3\x92', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000006574f87e8580ccb90300060000000000000000b7380000000000000000000000000020000204"], 0x2e) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:29:53 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 13:29:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:53 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f03886ade6c6300d373d48aa17403"], 0xfdef) 13:29:53 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:29:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:53 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') [ 1074.244394][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:29:53 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 13:29:53 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:53 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:53 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:53 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 13:29:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0xfe2f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss, @mss], 0x132505) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1) fcntl$setstatus(r1, 0x4, 0x27fe) 13:29:54 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:54 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) 13:29:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000400)=[{r1}], 0x1, 0x100) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 13:29:54 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:54 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:54 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:54 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:54 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180)=""/40, &(0x7f00000001c0)=0x28) 13:29:54 executing program 3: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="cc", 0x1, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 13:29:54 executing program 5: r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:54 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:55 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x11) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) rt_sigaction(0x0, &(0x7f0000000340)={&(0x7f00000001c0)="0f617900660f10c1c4e1fc2b4a0d6636d9f8c4e1c651daf082a700000000002e36f30f38f65c5bcc803700daba840000000f942a", {0x1}, 0x2, &(0x7f0000000300)="0f15c90f65eb65dc2fc4c185effef20f5c18ddccf0806b1b14c4c3456bae0000008050f2366567d9dc0f1d800d000000"}, &(0x7f0000000400)={&(0x7f0000000380)="646526f082610a07824c2d2104c017da6426f33e0f18810d0000000f4bd2660f2cd7c000fbc4e14758c026d133c4c1a9def9", {}, 0x0, &(0x7f00000003c0)="f30fbdf4660f382262bdc4c2f902e2c4e27597a2b191911e0fc70c9ad87fc6670ff7d8c4e1edeb499fc4c28139b4f3feefffff8fc858ec54280032"}, 0x8, &(0x7f0000000480)) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000980)="8ed1a9020136706de4e0f8c1a1a6ef67460516296c7329377a503be1458b0eef886b011f8a63d289d7241e000000000000000000de87ce8147197ebb0a76de09d793b87be78665a6913bcb5b45788a90a82291fad562b267b220d433785aaac636e10c17ea443b23461a06f31db50ea532ee937986e0971ef315fa4363cbda78aa7804e37eaa9305e5ac26d436c420346aeb6110a767f3d008f9d20fc4b56bc4c5a6") sendfile(r1, r4, 0x0, 0xa5cc554) ioctl$KDMKTONE(r2, 0x4b30, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000180)=0xc) 13:29:55 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x22000, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = socket$inet6(0xa, 0x7, 0xfffffffffffffffe) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000100), 0xcb) fchdir(r3) creat(&(0x7f0000000540)='./file0\x00', 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) r7 = socket(0x11, 0x9, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @remote}}) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x9d6c, @initdev, 0x9}, {0xa, 0x4e23, 0x400000, @mcast2, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x4, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x312) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r8 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 13:29:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:55 executing program 5: r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:55 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:55 executing program 5: r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="757365722e2fffffffff75703763521655bd0ce9319ee2ffe0dd9d06f686438f15e16e454dfd"], 0x0, 0x0, 0x0) 13:29:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000003c0)='./file0\x00', 0x7f) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.u\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00', 0x200002, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r0, &(0x7f0000000440)=0x1, 0x12) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000400)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x1, 0x2, 0x1, 0x7, r4}) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x8a) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140)) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) lseek(r2, 0x1, 0xffffffffffffffff) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r7, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r7, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) write$eventfd(r0, &(0x7f0000000080)=0x8, 0x8) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) 13:29:55 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:55 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xfb8, 0x1000]) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4400}, 0xc656407f7b21fa4d, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 13:29:55 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0xff}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x0, 0x43) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000080)='posix_acl_accesslovmnet1wlan0/-[vboxnet0\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x80000}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000e11ff0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fffffe181004e22000075a9bdee0521d283945f64009400050028925aa8000000000000ff7f00f0fffeffe809000000fff5dd001b2f0f000100070abd00000078b75bff3ec6", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r3, 0x0, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(0xffffffffffffffff, &(0x7f0000000600)="b2cf791ae07fcba019ebbd2764b345fa475d494fbe60cf259fd297b6a2fdd1ea01970074f98d272cf8d67d88f966abb43192f5914c3a07cc27be2b22f5fffb76de823d144210", 0x46) select(0x40, &(0x7f0000000040), &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) listen(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:29:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:55 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:56 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:56 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:56 executing program 3: r0 = gettid() r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0), 0x4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)="f1dace61f2fa41ea2aa1ee8914c3efef", 0x10}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) tkill(r0, 0x1000000000013) 13:29:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x7a) 13:29:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x257) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) 13:29:56 executing program 5: creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:56 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x7a) 13:29:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) 13:29:56 executing program 5: creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:56 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x7a) 13:29:56 executing program 2: pipe(&(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:29:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000006c0)) 13:29:56 executing program 5: creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 13:29:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, 0x0, 0x0, 0x7a) 13:29:56 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1d) 13:29:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) r1 = syz_open_pts(r0, 0x50800) ioctl$TIOCCONS(r1, 0x541d) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0xfc, 0x10, 0xd, 0x0, 0x0, {{@in, @in6}, {@in=@local, 0x0, 0x3c}, @in6=@rand_addr="b79094467f3c53259364c2264d64bfe0", {0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x80, 0x5) r5 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r5) r6 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f33\x00'/44]}) r11 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r12, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0, 0x0, 0x5}]) r13 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r14, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r13, 0x0, 0x0, 0x5}]) r15 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r16, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r15, 0x0, 0x0, 0x5}]) r17 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r18, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r17, 0x0, 0x0, 0x5}]) r19 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r20, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r19, 0x0, 0x0, 0x5}]) r21 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r22, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r21, 0x0, 0x0, 0x5}]) r23 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r24, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r23, 0x0, 0x0, 0x5}]) r25 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r26, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r25, 0x0, 0x0, 0x5}]) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYRESHEX=r25, @ANYRES16, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES32=0x0], @ANYRES16], 0x0) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r6, r5, 0x0, 0x80005) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000340)=0xfffffffffffffe2d) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) 13:29:57 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(0x0, &(0x7f00000000c0)='./file1/file0\x00') 13:29:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:29:57 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x0, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:57 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(0x0, &(0x7f00000000c0)='./file1/file0\x00') 13:29:57 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:57 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000180)={'ip6_vti0:\x00\xea:\x01\x00', @ifru_flags}) 13:29:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x0, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:57 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(0x0, &(0x7f00000000c0)='./file1/file0\x00') [ 1078.404391][ C0] net_ratelimit: 21 callbacks suppressed [ 1078.404400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.415969][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:57 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:29:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000011c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0), 0x213, 0x0, &(0x7f0000000100)}) 13:29:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x0, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x0, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:58 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', 0x0) 13:29:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0xffff) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000300), 0xffffff7e) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYBLOB="000126bd7000fcdbdf2509000000140003000800040002000000080007004e23000008000600ff07000014000300080001000000000008000500ac"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000140)={@remote}, &(0x7f0000000380)=0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x6, 0x400002) fcntl$addseals(r6, 0x409, 0x4) write$binfmt_elf64(r5, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 13:29:58 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x0, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:58 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', 0x0) 13:29:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x0, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:58 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 13:29:58 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:58 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000240)='./file0\x00', 0x0) 13:29:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x10000, 0x8) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ustat(0x6, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000001440)='dns_resolver\x00', &(0x7f0000001480)={'syz', 0x3}, &(0x7f00000014c0)='vboxnet0@\x00', 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001500)={r3, 0x3b}, &(0x7f0000001540)=ANY=[@ANYBLOB="656e633d72617720686173683d74677200000000000000000000000000000000000000000000000d000000000000000000000000000500000000000000"], &(0x7f00000017c0)="c41a39b1f175cf8f264e438cccead7d180b8de98faa570705be9f9f794f17d931d1df32384e6989c7f5db2a58188e3c5416e0e098fbc61b32b7a0c", &(0x7f0000001800)) prctl$PR_GET_THP_DISABLE(0x2a) pipe(&(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clone(0x0, &(0x7f0000000140), 0x0, &(0x7f0000001400), 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x8000000000002f5, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0xfff, 0x3, 0x8, 0x1000}, {0x6, 0x9, 0x7f, 0x9}, {0xb863, 0x0, 0x0, 0x5}, {0x80, 0x81, 0x1f, 0x7fff}, {0xeea, 0x5, 0x3f, 0x20}]}, 0x8) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) [ 1079.284372][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.284377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.284441][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.290207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.296010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.313440][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:58 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) clock_getres(0x7, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) getsockopt(0xffffffffffffffff, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000300)={0xf}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x8) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x4000e, 0x8000000000004, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) 13:29:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) [ 1079.444423][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.450357][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:58 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:59 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x82, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x0, 0x7ff, 0x1}) memfd_create(0x0, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xe8) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = inotify_init() getrusage(0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000004c0)=@srh, 0x8) sendmmsg(r4, &(0x7f00000092c0), 0x8000000000000a5, 0x4000180) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) 13:29:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x104) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x2, {0x2, 0x4e24, @multicast2}}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x8000006, 0x0, 0x0, 0x1}]}, 0x10) r2 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0xf52d, 0x4, 0x5, 0x0, 0x6, 0x56, 0x8, 0xbe42, 0x5, 0x6}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000001380)=0xfffffffffffeffff) close(r7) unshare(0x2000400) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0xfff, 0x555e, 0x5, 0x1ff, 0x4, 0x30}) 13:29:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x70, 0x6, 0xb6, 0x28, 0x3, 0x0, 0xfffffffeffffffff, 0x11944b3d73b5e53f, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6a, 0xf, @perf_bp={&(0x7f00000000c0), 0xd}, 0x906, 0x10000, 0x8000, 0x8, 0x6, 0x6, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) 13:29:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:59 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}}, 0x0) fchdir(r3) r6 = creat(&(0x7f0000000740)='./bus\x00', 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x40) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f00000005c0)) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) open(&(0x7f00000001c0)='./bus\x00', 0xc000, 0x20) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() fsync(r6) write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[], 0x87) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xfee, &(0x7f0000000cc0)="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", 0x3, 0x0, &(0x7f00000000c0)='ZKP'}) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001000d}, 0x0) clock_getres(0xe, 0x0) r7 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f0000000140)) r8 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x4000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, 0x0, 0x3e065fae0c0394b, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 13:29:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:29:59 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:59 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="583614fefccf4e645a1ea5ab8fc2f6b38d2078e203e557334bbd07a92ce54222c251ae772905dc8b434ae2a0bc3320d20520c23c26", 0x35}], 0x1}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f00000000c0)={'ifb0\x02\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 13:29:59 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:29:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:29:59 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/P\x9c\xed\xb8tA#\x9fuX\x00', 0x2, 0x0) io_setup(0x100, &(0x7f0000000180)=0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) io_submit(r0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$cgroup_subtree(r2, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000400)={0x10, 0xd2, 0x80000001}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000000)="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", 0xfc) getrandom(&(0x7f00000003c0)=""/45, 0x2d, 0x3) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2c) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000006c0)={0x1000000000008003, 0x5, 0x3, 0x1}) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000500)=0x4) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x90, &(0x7f0000000300)=@sco={0x1f, {0x0, 0xd9, 0x3f, 0x8, 0x0, 0xe00000}}, 0x80) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000800)=""/252) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000380)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) open(0x0, 0x8002, 0x4) write$P9_RXATTRWALK(r6, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x81}, 0xf) 13:30:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x70, 0x6, 0xb6, 0x28, 0x3, 0x0, 0xfffffffeffffffff, 0x11944b3d73b5e53f, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6a, 0xf, @perf_bp={&(0x7f00000000c0), 0xd}, 0x906, 0x10000, 0x8000, 0x8, 0x6, 0x6, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) 13:30:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:30:00 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000000)=""/44, 0x2c}], 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 13:30:00 executing program 2: creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf407000000ecbc5d070e9826557914da15672cdeff2a36e18bfcf801223d563b0400c7fb302fe5c6973e9c780000000500", "f1a559472b3b5a30c2c9d7803800"}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) flock(r5, 0x3) fchown(r5, 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000400)={0x0, 0x3}) r6 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000440)='yam0\x00', r3) r7 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r4, r6, r7, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, 0x0, r6}, &(0x7f0000000300)=""/116, 0x74, &(0x7f0000000140)={&(0x7f00000000c0)={'xxhash64\x00'}, &(0x7f0000000380)="360b9437dda4d08b74aa967c760c6bb6511548249dfe9d2dbaa081c18a4c69650b52fed7659ab91437381c420d7163616ad30417bc8d9444ec168f2341284610d15bbce6d8dd0763847202dd15eefc27f6e335", 0x53}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x306, @random="202456c70b3a"}, 0x20, {0x2, 0x4e22, @rand_addr=0x8}, 'veth1\x00'}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 13:30:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 13:30:00 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x3, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="bfb6ae7485bc014435cd746d"], 0x1, 0x1) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r4 = getpid() r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) prlimit64(r4, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) getxattr(&(0x7f0000000340)='./bus\x00', &(0x7f00000005c0)=@random={'security.', 'unodevposix_acl_accessppp1.\x00'}, &(0x7f0000000600)=""/107, 0x6b) openat$cgroup_ro(r3, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r2, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r4, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)) 13:30:00 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:00 executing program 4: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), 0x4) 13:30:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x70, 0x6, 0xb6, 0x28, 0x3, 0x0, 0xfffffffeffffffff, 0x11944b3d73b5e53f, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6a, 0xf, @perf_bp={&(0x7f00000000c0), 0xd}, 0x906, 0x10000, 0x8000, 0x8, 0x6, 0x6, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) 13:30:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:00 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0xfffffffffffffd66) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r3 = dup(r2) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000980), &(0x7f0000000580)=0x14) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000640)=0x1) r5 = inotify_init() lseek(r5, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) r6 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) getsockname(r6, &(0x7f00000001c0)=@rc, &(0x7f0000000080)=0xffffffffffffff9f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r7, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @timestamp, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0), 0x4) r8 = syz_open_dev$rtc(&(0x7f0000000340)='/dev/rtc#\x00', 0x6, 0x101000) dup2(r8, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r3, r9, 0x0, 0x8000fffffffe) 13:30:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xbab230cf) read(r0, &(0x7f0000000780)=""/260, 0xed53be3eddf93298) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') sendmmsg(r4, &(0x7f0000000b00)=[{{&(0x7f0000000300)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="8a49a6da78c6c2ef0d08065fc0e7ccf85ae4b2ea9407d9bd2a6e8fca68c2fb5f0da3cd4a5d7e216a68e42e64bad216add92a4f8dbe0ea6c37f3a12df14b6033f4b5d4397df067657d8c5077ab77afa54233bc286cd1bbd927a76118445857c410e3345e5552423cd1f4f583926d7ee11929dacd129f72e46e00ff4d2fa710d115bc21f2f1a3a", 0x86}], 0x1, &(0x7f00000004c0)=[{0x7c, 0x105, 0x4, "51bb1a22d42be0ac398efa60997629baa4b0215dcdcec1452ed0a6863ed158d5cd6705cb4686942291bbfe9e09a0a689d6580100af890c3b3f9786592652b79570f300476765289731068247bf34fcb5dbe9ca79a1bac20d0acd2299be24e99902ce2463096628297c92d6a4653d79fb"}], 0x7c}}, {{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x4, @random="de26a805c1f4", 'dummy0\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000680)="faa993ee0e68fc901d4c8851dfe8b3823734db29e83761dc9a0a062d0e1283fd6255dabcec", 0x25}, {&(0x7f00000008c0)="90bb5341ce7a95f2e2c75326804fbca00ca50ada3108811edda70c5c93720c28733b36dd1fca0e171e3aaba176f5670fea5624413ccbd9b208195d6a5c1de6552b34f15dde1c1d1c08a8c0cc46b3b74bb6c905bb3beefc7f7364182861e2036fde37a9d2d9353f3ce194320b731ec7d09f5025452c9e5e1282eda7368cab438bf62ffd3709da032e887a658cca", 0x8d}, {&(0x7f0000000700)="9c6b2c353ba46d16aa193180672c8920d66476b26827b3c59d3c8cee0c4d26c49ecdbb46a3ab516ae977da0c4f6b223f02e51e677964a4aeeb5b12ef7412efe410b880ed21a074cbb0ab64d708ebd7f46845463fb3d5d4814ba8926226f6c4c5d322bf0f09928e28534da8590a", 0x6d}], 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x18d}}], 0x2, 0x1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x800000000000196, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc54c1bf44a34da23) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) set_tid_address(&(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x4, 0x3, 0x3, 0x0, 0x2, 0x1c0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x4, 0x0, 0x4, 0x4, 0x200, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x8) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 13:30:00 executing program 4: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), 0x4) 13:30:00 executing program 4: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0xffffffffffffffff}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13:30:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), 0x4) 13:30:01 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:01 executing program 2: [ 1081.945319][ T26] audit: type=1326 audit(1571923801.305:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9463 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd3a code=0xffff0000 13:30:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x70, 0x6, 0xb6, 0x28, 0x3, 0x0, 0xfffffffeffffffff, 0x11944b3d73b5e53f, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6a, 0xf, @perf_bp={&(0x7f00000000c0), 0xd}, 0x906, 0x10000, 0x8000, 0x8, 0x6, 0x6, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) 13:30:01 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8\xf1\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 13:30:01 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) 13:30:01 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) [ 1082.242272][ T9493] device nr0 entered promiscuous mode 13:30:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) [ 1082.733881][ T26] audit: type=1326 audit(1571923802.085:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9463 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd3a code=0xffff0000 [ 1082.770763][ T9493] device nr0 entered promiscuous mode 13:30:02 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0xedf1d44) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x0) write$FUSE_WRITE(r6, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) fcntl$setstatus(r1, 0x4, 0x6100) fdatasync(r0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r0}) 13:30:02 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) 13:30:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) 13:30:02 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:02 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:02 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) 13:30:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x2e) [ 1083.444383][ C1] net_ratelimit: 16 callbacks suppressed [ 1083.444392][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.444429][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.450103][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.450196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.467396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.533810][ T9801] hfs: can't find a HFS filesystem on dev loop2 13:30:03 executing program 1: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 13:30:03 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) [ 1083.604395][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.610298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.625501][ T9801] hfs: can't find a HFS filesystem on dev loop2 13:30:03 executing program 5: r0 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_gettime(r1, &(0x7f0000eb8000)) 13:30:03 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:03 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:03 executing program 1: 13:30:03 executing program 5: [ 1083.941613][T10029] hfs: can't find a HFS filesystem on dev loop2 13:30:03 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:03 executing program 1: 13:30:03 executing program 5: 13:30:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) inotify_init() 13:30:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:03 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) [ 1084.244365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.250204][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000180), 0x40400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x186, 0x0, 0x0, 0x4}) r4 = socket$unix(0x1, 0x2, 0x0) pidfd_open(0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000240)={0x1, r3, 0x0, 0x59}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 13:30:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 1084.449081][T10193] hfs: can't find a HFS filesystem on dev loop2 13:30:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 13:30:03 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:04 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) [ 1084.644578][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:30:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) getegid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 1084.839563][T10480] hfs: can't find a HFS filesystem on dev loop2 13:30:04 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:04 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100400, 0x0) 13:30:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:04 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8, 0x4000000000000800, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f00000001c0)=""/4103}, 0x20) 13:30:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:04 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:04 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x24, 0x4000000000000800, 0x6}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) 13:30:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00#\x7f\x80P=r\xc4\x17I~\x85\xadq\xd6\xde@\xb3\xd5\x9f2R\xa3Z\xd3\x9b\xbd\xa1\xa3/\xc0\x91J\x01!8#\x04\x0f\xc3\xb7\x95\xdc\xaa\x91\xfb\xa1]PVH\xaa\x19\x04\x80\x94\'\xc7\fL\xac\xcf:\x92N\x94\xde\x87\xc4\x9b\x87\xd2\xcc{X\xedVr\xecP\xf9&^I\x9f}3U?\x1a\r\x9d', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B', 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9c7d7ab9) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000700000000000000ff0100007a00000001"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x20000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/group.\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xde\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xff\xff\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00>\xdc\xcbzg\x95\x18\x11\xa6\xf0\xba\x1e\xcb\xaf\xa1\x87\xd6bFU_\xeb\xb0\xe3^\n\x1a7\xc0\xa3\xc2\x1a\x9d\xf0\x94\xa3\xb7\x17Vk\xe1\r\x18\xba\n\x84\xf65\vH\xcbu\x13\xcb&\x1e.(\xb6Cc\xd8\xac]\xf4\xfa\xe2CWv\x03\x92?\xf83\x8aN\xc6\x8b\xec\xc1\x88/\xb1\x0f\xeb\aW\xe2\xdc)\x92\xd0\x10\xac\xee\xf6\xa4\xf4Q\xf9-\xa9)\x8cX\x96\x12\xfahz\xcbn\xb3\x92\x03\xfc\x0f\xa7Ew\xacJ:\x04\xf3\x98\x0ev#', 0x2761, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xed, 0x0, 0x1}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x3, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000200)="3487b4c1a6535398bb704c8ca2d66e495b10a70aa98685052d15d40453f1e14ee34cfd47392b7e0361a381f70951852e8661b0af6cb876f3aba224e736b2adc9ef55f2608f1b410934581c5b9bf2f434610efdf1f993ea07383652f2ffaa37f1e300a2d27deab514e1a960f5185931d353f1518f230463a8e16895427cbe2f5d16ec8e331db89308ae3ccbb653d27d1626e6021894e3bd3535c13e4217bde96cc3c21a06578c29ef5aaa1c94bb49dec0751bd2d06604e47eeb7f0ac72a9c067112bf54e1fdb81580a2118c9e07b00ece93f2436d06aba79e3f7d6fa0f549c52258eaaf3c4b6e3dba7942a35d4318428ccb132f6c574b39a8ae", &(0x7f0000000300)=""/254, 0x4}, 0x20) 13:30:05 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:05 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) 13:30:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13:30:05 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:05 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13:30:05 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:05 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13:30:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00#\x7f\x80P=r\xc4\x17I~\x85\xadq\xd6\xde@\xb3\xd5\x9f2R\xa3Z\xd3\x9b\xbd\xa1\xa3/\xc0\x91J\x01!8#\x04\x0f\xc3\xb7\x95\xdc\xaa\x91\xfb\xa1]PVH\xaa\x19\x04\x80\x94\'\xc7\fL\xac\xcf:\x92N\x94\xde\x87\xc4\x9b\x87\xd2\xcc{X\xedVr\xecP\xf9&^I\x9f}3U?\x1a\r\x9d', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B', 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9c7d7ab9) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000700000000000000ff0100007a00000001"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x20000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/group.\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xde\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xff\xff\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00>\xdc\xcbzg\x95\x18\x11\xa6\xf0\xba\x1e\xcb\xaf\xa1\x87\xd6bFU_\xeb\xb0\xe3^\n\x1a7\xc0\xa3\xc2\x1a\x9d\xf0\x94\xa3\xb7\x17Vk\xe1\r\x18\xba\n\x84\xf65\vH\xcbu\x13\xcb&\x1e.(\xb6Cc\xd8\xac]\xf4\xfa\xe2CWv\x03\x92?\xf83\x8aN\xc6\x8b\xec\xc1\x88/\xb1\x0f\xeb\aW\xe2\xdc)\x92\xd0\x10\xac\xee\xf6\xa4\xf4Q\xf9-\xa9)\x8cX\x96\x12\xfahz\xcbn\xb3\x92\x03\xfc\x0f\xa7Ew\xacJ:\x04\xf3\x98\x0ev#', 0x2761, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xed, 0x0, 0x1}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x3, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000200)="3487b4c1a6535398bb704c8ca2d66e495b10a70aa98685052d15d40453f1e14ee34cfd47392b7e0361a381f70951852e8661b0af6cb876f3aba224e736b2adc9ef55f2608f1b410934581c5b9bf2f434610efdf1f993ea07383652f2ffaa37f1e300a2d27deab514e1a960f5185931d353f1518f230463a8e16895427cbe2f5d16ec8e331db89308ae3ccbb653d27d1626e6021894e3bd3535c13e4217bde96cc3c21a06578c29ef5aaa1c94bb49dec0751bd2d06604e47eeb7f0ac72a9c067112bf54e1fdb81580a2118c9e07b00ece93f2436d06aba79e3f7d6fa0f549c52258eaaf3c4b6e3dba7942a35d4318428ccb132f6c574b39a8ae", &(0x7f0000000300)=""/254, 0x4}, 0x20) 13:30:06 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:06 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@dir_umask={'dir_umask'}}]}) 13:30:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c) 13:30:06 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:06 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:30:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 1087.486185][T11107] hfs: can't find a HFS filesystem on dev loop2 13:30:06 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00#\x7f\x80P=r\xc4\x17I~\x85\xadq\xd6\xde@\xb3\xd5\x9f2R\xa3Z\xd3\x9b\xbd\xa1\xa3/\xc0\x91J\x01!8#\x04\x0f\xc3\xb7\x95\xdc\xaa\x91\xfb\xa1]PVH\xaa\x19\x04\x80\x94\'\xc7\fL\xac\xcf:\x92N\x94\xde\x87\xc4\x9b\x87\xd2\xcc{X\xedVr\xecP\xf9&^I\x9f}3U?\x1a\r\x9d', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B', 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9c7d7ab9) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000700000000000000ff0100007a00000001"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x20000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/group.\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xde\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xff\xff\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00>\xdc\xcbzg\x95\x18\x11\xa6\xf0\xba\x1e\xcb\xaf\xa1\x87\xd6bFU_\xeb\xb0\xe3^\n\x1a7\xc0\xa3\xc2\x1a\x9d\xf0\x94\xa3\xb7\x17Vk\xe1\r\x18\xba\n\x84\xf65\vH\xcbu\x13\xcb&\x1e.(\xb6Cc\xd8\xac]\xf4\xfa\xe2CWv\x03\x92?\xf83\x8aN\xc6\x8b\xec\xc1\x88/\xb1\x0f\xeb\aW\xe2\xdc)\x92\xd0\x10\xac\xee\xf6\xa4\xf4Q\xf9-\xa9)\x8cX\x96\x12\xfahz\xcbn\xb3\x92\x03\xfc\x0f\xa7Ew\xacJ:\x04\xf3\x98\x0ev#', 0x2761, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xed, 0x0, 0x1}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x3, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000200)="3487b4c1a6535398bb704c8ca2d66e495b10a70aa98685052d15d40453f1e14ee34cfd47392b7e0361a381f70951852e8661b0af6cb876f3aba224e736b2adc9ef55f2608f1b410934581c5b9bf2f434610efdf1f993ea07383652f2ffaa37f1e300a2d27deab514e1a960f5185931d353f1518f230463a8e16895427cbe2f5d16ec8e331db89308ae3ccbb653d27d1626e6021894e3bd3535c13e4217bde96cc3c21a06578c29ef5aaa1c94bb49dec0751bd2d06604e47eeb7f0ac72a9c067112bf54e1fdb81580a2118c9e07b00ece93f2436d06aba79e3f7d6fa0f549c52258eaaf3c4b6e3dba7942a35d4318428ccb132f6c574b39a8ae", &(0x7f0000000300)=""/254, 0x4}, 0x20) 13:30:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:07 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:07 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:30:07 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:07 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) [ 1088.121090][T11228] hfs: can't find a HFS filesystem on dev loop2 13:30:07 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:07 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:07 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:30:07 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r0, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:07 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:07 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) [ 1088.511867][T11253] hfs: can't find a HFS filesystem on dev loop2 13:30:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00#\x7f\x80P=r\xc4\x17I~\x85\xadq\xd6\xde@\xb3\xd5\x9f2R\xa3Z\xd3\x9b\xbd\xa1\xa3/\xc0\x91J\x01!8#\x04\x0f\xc3\xb7\x95\xdc\xaa\x91\xfb\xa1]PVH\xaa\x19\x04\x80\x94\'\xc7\fL\xac\xcf:\x92N\x94\xde\x87\xc4\x9b\x87\xd2\xcc{X\xedVr\xecP\xf9&^I\x9f}3U?\x1a\r\x9d', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B', 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9c7d7ab9) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000700000000000000ff0100007a00000001"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x20000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/group.\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xde\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xff\xff\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00>\xdc\xcbzg\x95\x18\x11\xa6\xf0\xba\x1e\xcb\xaf\xa1\x87\xd6bFU_\xeb\xb0\xe3^\n\x1a7\xc0\xa3\xc2\x1a\x9d\xf0\x94\xa3\xb7\x17Vk\xe1\r\x18\xba\n\x84\xf65\vH\xcbu\x13\xcb&\x1e.(\xb6Cc\xd8\xac]\xf4\xfa\xe2CWv\x03\x92?\xf83\x8aN\xc6\x8b\xec\xc1\x88/\xb1\x0f\xeb\aW\xe2\xdc)\x92\xd0\x10\xac\xee\xf6\xa4\xf4Q\xf9-\xa9)\x8cX\x96\x12\xfahz\xcbn\xb3\x92\x03\xfc\x0f\xa7Ew\xacJ:\x04\xf3\x98\x0ev#', 0x2761, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xed, 0x0, 0x1}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x3, 0xed, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000200)="3487b4c1a6535398bb704c8ca2d66e495b10a70aa98685052d15d40453f1e14ee34cfd47392b7e0361a381f70951852e8661b0af6cb876f3aba224e736b2adc9ef55f2608f1b410934581c5b9bf2f434610efdf1f993ea07383652f2ffaa37f1e300a2d27deab514e1a960f5185931d353f1518f230463a8e16895427cbe2f5d16ec8e331db89308ae3ccbb653d27d1626e6021894e3bd3535c13e4217bde96cc3c21a06578c29ef5aaa1c94bb49dec0751bd2d06604e47eeb7f0ac72a9c067112bf54e1fdb81580a2118c9e07b00ece93f2436d06aba79e3f7d6fa0f549c52258eaaf3c4b6e3dba7942a35d4318428ccb132f6c574b39a8ae", &(0x7f0000000300)=""/254, 0x4}, 0x20) 13:30:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) 13:30:08 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r0, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:08 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) 13:30:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:08 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) [ 1088.804595][ C0] net_ratelimit: 22 callbacks suppressed [ 1088.804604][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.816115][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:08 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r0, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 1089.055572][T11281] hfs: can't find a HFS filesystem on dev loop2 13:30:08 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:08 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) [ 1089.462774][T11305] hfs: can't find a HFS filesystem on dev loop2 [ 1089.684428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.684456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.690281][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.695971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.701736][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.713153][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:09 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}, 0x0) 13:30:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:09 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:09 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) 13:30:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) [ 1089.844394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.850237][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) [ 1089.886352][T11319] hfs: can't find a HFS filesystem on dev loop2 13:30:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x24, 0x4000000000000800, 0x6}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0}, 0x20) 13:30:09 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x1, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0}, 0x20) 13:30:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8, 0x4000000000000800, 0x1}, 0xe) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0}, 0x20) 13:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:09 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6664a8990785", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:30:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) 13:30:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x0, 0x0) 13:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:10 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(0x0, 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="640f01c366b8ad008ed00f08c4417b2c020f3548b800000100000000000f23c00f21f835010008000f23f80fc778fc0f350fd8060f30", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:10 executing program 1: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ptrace(0x11, r0) 13:30:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:10 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(0x0, 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x3102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=""/136, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x8000, {{0x2, 0x0, @loopback}}}, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0) 13:30:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) socket$inet6(0xa, 0x2, 0x0) 13:30:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 13:30:10 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(0x0, 0x0, 0x0) fchdir(r1) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:10 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:11 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:11 executing program 1: clone(0x8000100000203, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x800001040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) symlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000440)='./file1\x00') r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r1, r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x841, 0x0) clone(0x4003102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 13:30:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:11 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000680)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x2) 13:30:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) socket$inet6(0xa, 0x2, 0x0) 13:30:11 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000040)='./bus\x00', 0x0) 13:30:11 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 13:30:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7d, &(0x7f0000000100), &(0x7f0000000140)=0xc) 13:30:11 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(0x0, 0x0) 13:30:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x73, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000758, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendto$inet(r0, &(0x7f0000000200)='8', 0xfffffffffffffd84, 0xfffffffffffffffd, 0x0, 0xfffffffffffffd62) 13:30:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:11 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(0x0, 0x0) 13:30:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:12 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) socket$inet6(0xa, 0x2, 0x0) 13:30:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000000000000000", 0x58}], 0x1) 13:30:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 13:30:12 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r1) truncate(0x0, 0x0) 13:30:12 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="23000000250007041dfffd946f6105000a0081001f0000000400080008000f000400ff", 0x23}], 0x1}, 0x0) 13:30:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="640f01c366b8ad008ed00f08c4417b2c020f3548b800000100000000000f23c00f21f835010008000f23f80fc778fc0f350fd8060f30", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13:30:12 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffedd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 13:30:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13:30:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13:30:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) [ 1093.462639][T12237] debugfs: File '12212' in directory 'proc' already present! 13:30:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13:30:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:13 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 13:30:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1b, &(0x7f00000000c0)='wlan1\x00\xa2\xb8y\xe1\x04\xbe\x00\x00\t\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x04\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 13:30:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000740)) [ 1093.844357][ C0] net_ratelimit: 16 callbacks suppressed [ 1093.844366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.844405][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.850104][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.855930][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.873091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.000290][ T26] audit: type=1800 audit(1571923813.355:201): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17829 res=0 [ 1094.020915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.020984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.073020][T12512] fuse: Invalid rootmode [ 1094.100639][T12518] fuse: Invalid rootmode 13:30:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd5}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x39b, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff88}, 0x3e) 13:30:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbd, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 13:30:13 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbd, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 13:30:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x25}}, 0xffffffffffffff4e) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='mex\x9ct(W)\x02\xf8\xfcPI\x97\x1e9Zs\x00'/28, 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x44) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x100000530) 13:30:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x0, 0x100000001, 0x10000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffedd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:30:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="640f01c366b8ad008ed00f08c4417b2c020f3548b800000100000000000f23c00f21f835010008000f23f80fc778fc0f350fd8060f30", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) [ 1094.654365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.660206][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:14 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0}}, 0x28000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x0) 13:30:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1095.044366][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:30:14 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x0, 0x7c, &(0x7f00000002c0), &(0x7f0000000380)=""/124, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000100)="1b0000001e0081c5e4050cecdb4cb9040a485e432700000000ffff", 0x1b}], 0x1}, 0x0) 13:30:14 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 13:30:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0xaf01, 0x0) 13:30:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:14 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 13:30:15 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18}, 0x18) 13:30:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:15 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) [ 1095.924714][ T26] audit: type=1800 audit(1571923815.275:202): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17808 res=0 13:30:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:15 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 13:30:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x70080180) 13:30:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) 13:30:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:15 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 13:30:15 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg(r0, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) 13:30:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000180)='&.\\keyring\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30}, 0x30) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) 13:30:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0xa, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 13:30:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@uid={'uid'}}]}) 13:30:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:17 executing program 5: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)='7') 13:30:18 executing program 4: mlock2(&(0x7f0000449000/0x600000)=nil, 0x600000, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='S'], 0x1) 13:30:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x18, 0x0, &(0x7f0000000540)=[@decrefs, @clear_death], 0x7aa, 0x0, &(0x7f00000005c0)="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"}) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) 13:30:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x18, 0x0, &(0x7f0000000540)=[@decrefs, @clear_death], 0x7aa, 0x0, &(0x7f00000005c0)="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"}) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) [ 1099.090328][T15134] net_ratelimit: 25 callbacks suppressed [ 1099.090337][T15134] A link change request failed with some changes committed already. Interface veth13 may have been left with an inconsistent configuration, please check. 13:30:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:18 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b2d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62eeed48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5b142e81e440a191f22c1e46fef2362b3ea23f65977a56e0cce43155b83d7516830469fdfd4bc91bee643b23511fc28d08150e01f41b1b36926aeec7a2065ea3b1e013", @ANYPTR=&(0x7f0000000380)=ANY=[], @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3d0fef215586de3c101e4f8d1b12b1894e2983d0c", @ANYRESDEC], 0x0, 0x168}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1099.214385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.220322][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3ffe, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:18 executing program 4: open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',defcontext=']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) 13:30:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 13:30:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 13:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) [ 1100.084349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.084388][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.091505][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.103048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.108868][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:19 executing program 5: setuid(0xee01) r0 = msgget(0x2, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 13:30:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1100.244412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.250264][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:19 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x18, 0x0, 0x1, &(0x7f00000000c0)) 13:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 13:30:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") recvmmsg(r0, &(0x7f0000000040), 0x30b, 0xa, 0x0) 13:30:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x30b, 0x0, 0x0) 13:30:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 13:30:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:21 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:21 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:21 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") recvmmsg(r0, &(0x7f0000000040), 0x30b, 0x0, 0x0) 13:30:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:21 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:22 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:22 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:22 executing program 5: setrlimit(0x8, &(0x7f00000000c0)={0x7, 0x95}) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000440)}], 0x1) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000000440), 0xff52}], 0x1) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)='9', 0x1}], 0x1) readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000100)=""/180, 0xfffffdb7}, {0x0, 0x91}], 0x10000000000003cc) 13:30:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:22 executing program 5: shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) 13:30:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:23 executing program 5: r0 = msgget(0x2, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x800) 13:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:23 executing program 5: msgget(0x0, 0x633) 13:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) [ 1104.244401][ C1] net_ratelimit: 15 callbacks suppressed [ 1104.244410][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.244450][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1104.250166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1104.267415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.273236][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1104.404417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.410333][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:23 executing program 5: mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x7f}], 0x1, 0x0) 13:30:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:23 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:24 executing program 5: r0 = msgget(0x2, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 13:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1105.044367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.050227][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:24 executing program 5: r0 = msgget(0x2, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 13:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) [ 1105.444627][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:25 executing program 5: 13:30:25 executing program 5: 13:30:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:25 executing program 5: 13:30:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:26 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x4, 0x0) 13:30:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:26 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x4, 0x0) 13:30:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:26 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x4, 0x0) 13:30:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:27 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x4, 0x0) 13:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:27 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}, {0x0}], 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:27 executing program 5: msgget(0x0, 0x0) 13:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:27 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/224) 13:30:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:28 executing program 5: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x800) 13:30:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:28 executing program 5: 13:30:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1109.604391][ C0] net_ratelimit: 22 callbacks suppressed [ 1109.604400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.616071][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:29 executing program 5: 13:30:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/191, 0xbf}], 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:29 executing program 5: 13:30:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:29 executing program 5: 13:30:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) [ 1110.484475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.490288][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.494349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.501918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.507779][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.513543][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.644432][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.650339][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0), 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:30 executing program 5: 13:30:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:30 executing program 5: 13:30:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0), 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:30 executing program 5: 13:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:30 executing program 5: 13:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:31 executing program 5: 13:30:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0), 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:31 executing program 5: 13:30:31 executing program 5: 13:30:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:31 executing program 5: 13:30:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:31 executing program 5: 13:30:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:31 executing program 5: 13:30:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:32 executing program 5: 13:30:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:32 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:30:32 executing program 5: 13:30:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:32 executing program 5: 13:30:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, &(0x7f0000000140)=0x31c) 13:30:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, &(0x7f0000000140)=0x31c) 13:30:32 executing program 5: 13:30:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:33 executing program 5: 13:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, &(0x7f0000000140)=0x31c) 13:30:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:33 executing program 5: 13:30:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) 13:30:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:33 executing program 5: 13:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) 13:30:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:33 executing program 5: [ 1114.644362][ C0] net_ratelimit: 15 callbacks suppressed [ 1114.644370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.644411][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1114.650081][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1114.655866][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.673119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1114.804424][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.810325][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) 13:30:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:34 executing program 5: 13:30:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:34 executing program 4: 13:30:34 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000000000008040, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1004000000016) fcntl$setlease(r1, 0x400, 0x2) 13:30:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:34 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, r1) [ 1115.444358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.450778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.844403][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:30:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, 0x0) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:35 executing program 5: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) 13:30:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000040)=""/4, &(0x7f00005e5ffc)=0x4) 13:30:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x63, 0x400000002}], 0xd9) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) pipe(0x0) 13:30:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 13:30:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:36 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000704ab092506090007000aab08000600000002002593210001", 0x1f) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfec1) pipe(0x0) 13:30:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:36 executing program 5: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x163942, 0xb6a551c78246b62e) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000500)='cilter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340), &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @dev={[], 0x12}}, 0x10) clock_gettime(0x6, &(0x7f0000000040)) nanosleep(0x0, &(0x7f0000000140)) tkill(r0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x40, 0x104) 13:30:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:36 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 13:30:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:30:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 13:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(0xffffffffffffffff, &(0x7f0000000100)=""/19, 0xfffffd81) 13:30:37 executing program 5: prctl$PR_CAPBSET_DROP(0x18, 0xffffffffffffffff) 13:30:37 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2002) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, 0x0, 0x0) 13:30:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2, 0x0, 0x3f) 13:30:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e07d04000800006b245ea4e8b4e9431d528a88aec42662523cec74a41f0c705ec940604a27ee9bac39c4fda5dc22f85b22084d0027abec226f10621e95e9182459016ba2ccf898e1d2930c2d4ae8ba61ca228860a9406fd0848ae882d7f97de591"], 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 13:30:37 executing program 4: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x180000, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 13:30:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, 0x0, 0x0) 13:30:37 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2002) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, 0x0, 0x0) 13:30:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:37 executing program 4: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x180000, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 13:30:37 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2002) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000000c0)=0x400, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:30:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:38 executing program 4: r0 = socket(0x400020000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8}}) 13:30:38 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x15000300, 0x100) 13:30:38 executing program 3: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x140081) r0 = memfd_create(&(0x7f0000000200)='eth1mime_type:\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, 0x11}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000100)='./file0\x00') close(r2) dup2(r2, r1) 13:30:38 executing program 4: r0 = socket$inet6(0x10, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') dup2(r1, r0) write$P9_RWALK(r0, 0x0, 0x576df542278d7801) 13:30:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:38 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:38 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @dev, [{}], {@mpls_uc={0x8847, {[], @ipv6={0x0, 0x6, "a7e72c", 0x14, 0x0, 0x0, @ipv4={[], [], @local}, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x0) 13:30:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') write$cgroup_pid(r0, 0x0, 0x0) 13:30:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24000000000013, &(0x7f0000000180), 0x4) write$binfmt_elf64(r0, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}}, {{0x0, 0x33f, &(0x7f0000001980), 0x6e}}], 0x2, 0x0) 13:30:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000015c0)='dctcp-reno\x00', 0xb) r2 = epoll_create1(0x100000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000340)={{0x0, 0x0, @identifier="25577e259693288c4b58493d6106cb72"}}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup2(r3, r0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xfffffffffffffffe) r6 = syz_open_procfs(r5, &(0x7f0000000580)='setgroups\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto(r7, &(0x7f0000000040)="b6", 0x1, 0x1, 0x0, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000001c0)=""/107, 0x6b}], 0x3, &(0x7f00000003c0)=""/150, 0x96}, 0x18001) 13:30:38 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:38 executing program 3: creat(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x1000000) 13:30:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:39 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="310000000400000000000000000000010000000000000000f6000000000000000900"/49], 0x31) fchownat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, r4, 0x1000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100)='trusted.overlay.opaque\x00', 0x0, 0xffffff7b, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff87) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) dup(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x65667b1d2743205e, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 13:30:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$UI_END_FF_ERASE(r0, 0x4004556a, &(0x7f0000000080)) 13:30:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 13:30:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1120.004426][ C0] net_ratelimit: 23 callbacks suppressed [ 1120.004434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.016022][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:39 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000004d80)={&(0x7f0000003480)=@l2, 0x80, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x3d1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88004) sendmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x3fffe83, 0x0) 13:30:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000040)={'ip_vti0\x00', @ifru_mtu}) 13:30:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:39 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffe94) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="105cdcf349fa12aad7d7a2d2403368a108384df8c0de42cd03275426bf0eefd2b449207a41aa33a9515d59af6c80b7ab0bd4c171f2929da76348cf6713350c4885e2fdac65f6b2831d436aafcdcd6bd3e0a0995fa01251503fa137bd5818f1423c3f174fcabcbb1bad600d9be4b60a631cfdee05896b83a411db74b68969c5857fe914905b00"/147], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r4) creat(&(0x7f0000000300)='./file0\x00', 0x84) unlinkat(r6, &(0x7f0000000240)='./file0\x00', 0x200) creat(&(0x7f00000000c0)='./file1\x00', 0x20) setxattr$security_ima(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "034932f5749bd3bb8a79dc5a9e98ea4d42c16af9"}, 0x15, 0x1) 13:30:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1120.550144][T21642] input: syz1 as /devices/virtual/input/input138 13:30:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:40 executing program 4: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0xbc9dc8fbd81cb431) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1}) unshare(0x40600) writev(r0, &(0x7f00009adf60)=[{&(0x7f0000000140)="c2", 0x1}], 0x1) write$FUSE_ENTRY(r0, 0x0, 0x0) r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) dup2(r0, r1) 13:30:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="852a627300633bf6c8b9de6cb10000000000000000000000852a747000000000000000000000000000000000000000000000004000000000000000ffff000000852a6273"], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000180000000000000040"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0}) 13:30:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1120.781841][T21793] debugfs: File '21736' in directory 'proc' already present! 13:30:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1120.825870][T21793] debugfs: File '21736' in directory 'proc' already present! [ 1120.884388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.884431][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.890203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.890298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.907524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.995064][T21938] input: syz1 as /devices/virtual/input/input140 13:30:40 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = geteuid() setreuid(0x0, r0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) sendmmsg(r3, &(0x7f0000007fc0), 0x5654807, 0x0) unshare(0x40040000) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmh\x00', 0x124c0, 0x0) read(r6, &(0x7f0000000740)=""/102400, 0x19000) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x15}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x7) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_pwait(r9, &(0x7f00000000c0)=[{}], 0x1, 0x7, 0x0, 0xb3) gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)) 13:30:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1121.044407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.051408][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) [ 1121.322776][T22018] input: syz1 as /devices/virtual/input/input141 13:30:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f0000005100)=ANY=[@ANYBLOB="180000046ada090702000b0277cb0a28076d00000080000000002cd30097e109efe5ef6bd8cd479ad922f100d7d985269622e967b6ed9cc2e45aa7cedbd2cc215ffe72ba7aafb64d754d332fc268ef6c63f24a503ad3de553936200b11001bb2a154c9e86670d2161a80a949e37da4096fe903979b2e0000000000000000"], 0x18) sendfile(r5, r5, 0x0, 0xffffffff80000001) timer_create(0x0, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000002200)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af057425607000bd076ad5a436b8d8de3bffef7858ef6ec09c3e2bb518c1233e339f1e971c0abc20facf793086fdf6950aba302898ca366f1d6f3e724e8613b30fd02edabebd65d79cfab9f9d7efec8d838b99cd21ab07ddb0150a3c38f8992"}}, &(0x7f00000003c0)) timer_gettime(0x0, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003e00)=""/158, 0x9e}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5, &(0x7f0000001980)=""/207, 0xcf}, 0x7}, {{&(0x7f0000000880)=@l2, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001a80)=""/227, 0xe3}, {&(0x7f0000001b80)=""/169, 0xa9}, {&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000005180)=""/180, 0xb4}, {&(0x7f0000001dc0)=""/44, 0x2c}, {&(0x7f0000001e00)=""/142, 0x8e}, {&(0x7f0000001ec0)=""/101, 0x65}], 0x8, &(0x7f0000001f80)=""/130, 0x82}, 0x7fffffff}, {{&(0x7f0000002040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)=""/122, 0x7a}, {&(0x7f0000002140)=""/46, 0x2e}, {&(0x7f0000002180)=""/78, 0x4e}, {0x0}, {&(0x7f00000022c0)=""/72, 0x48}, {&(0x7f0000002340)=""/45, 0x2d}, {&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/27, 0x1b}], 0x8, &(0x7f0000002500)=""/85, 0x55}}, {{&(0x7f0000002580)=@xdp, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/153, 0x99}, {&(0x7f00000026c0)=""/208, 0xd0}], 0x2}, 0x400}, {{&(0x7f0000002800)=@hci, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002880)=""/140, 0x8c}, {&(0x7f0000002940)=""/10, 0xa}, {&(0x7f0000002980)=""/165, 0xa5}, {&(0x7f0000002a80)=""/126, 0x7e}, {&(0x7f0000002b00)=""/84, 0x54}, {&(0x7f0000002b80)=""/117, 0x75}], 0x6, &(0x7f0000002c40)=""/26, 0x1a}, 0xb}, {{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/84, 0x54}, {&(0x7f0000003d80)=""/127, 0x7f}], 0x3, &(0x7f0000003f40)=""/212, 0xd4}, 0x4}], 0x6, 0x2000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) gettid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000940)) 13:30:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1121.684591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.731936][T22237] input: syz1 as /devices/virtual/input/input142 13:30:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) inotify_init() getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000013000900690006342fc58aef40be44081000000046000107000000540d0003c03a6465c5e3db8f002075702e1a", 0x31}], 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f00000000c0)=0x80000001, 0x4) write(r2, &(0x7f00000001c0), 0xfffffef3) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x28, 0x1) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = inotify_init() getrusage(0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, 0x0) fstat(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x170, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) 13:30:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1122.078941][T22360] input: syz1 as /devices/virtual/input/input143 13:30:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 13:30:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1122.669009][T22473] input: syz1 as /devices/virtual/input/input144 13:30:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:42 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) alarm(0x0) r1 = gettid() fcntl$addseals(r0, 0x409, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ftruncate(r0, 0x0) tkill(r1, 0x22) 13:30:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:42 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) [ 1123.005460][T22598] input: syz1 as /devices/virtual/input/input145 13:30:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:42 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:42 executing program 4: mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x17}, 0x56) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000400)={0xf9}, 0xffffffffffffff63) splice(r1, 0x0, r2, 0x0, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) 13:30:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:43 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:43 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x7fe, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x4000004, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1e}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 13:30:43 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x10004000000002, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x548, 0x0) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0xfffffffffffffe22, 0x0}}], 0x1ece87a4671555d, 0x42, 0x0) 13:30:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:43 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:43 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 13:30:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:43 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:44 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 13:30:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:44 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 13:30:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x1000, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0xffffffffffffffc3) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) [ 1125.044360][ C0] net_ratelimit: 13 callbacks suppressed [ 1125.044371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.054381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.055878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.061658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.073536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.079397][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.204421][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.210311][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:44 executing program 3: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:44 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000014}) ppoll(&(0x7f0000000340)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0) 13:30:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:44 executing program 3: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:45 executing program 3: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) [ 1125.844354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.850245][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:45 executing program 3: socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x400, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:30:45 executing program 3: socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:45 executing program 3: socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x25}}) 13:30:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "f04fab5e755a7331aeeb328ee66e7a70163c27"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffe}) 13:30:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 13:30:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 13:30:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:46 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0xfffffffffffffdf6) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xa0, r1, 0x93f7ae03a9464b0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2a}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xe08edbbde125024f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 13:30:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 13:30:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:30:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', 0x0}) 13:30:47 executing program 4: memfd_create(&(0x7f0000000340)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80800) pipe(&(0x7f0000000240)) getegid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) getegid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x124002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getegid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) fchown(r1, r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffe0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x8000ffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:30:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', 0x0}) 13:30:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', 0x0}) 13:30:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRESOCT=r3], 0x207) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r4) write$P9_RSTATu(r4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3], 0x2b1) recvmmsg(r4, &(0x7f0000003840)=[{{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001f80)=""/242, 0xf2}], 0x1, &(0x7f00000007c0)=""/80, 0x50}, 0x8}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=""/130, 0x82}, 0x6}, {{&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000004f00)=""/186, 0xba}, {&(0x7f0000004fc0)=""/81, 0x51}, {&(0x7f0000005040)=""/196, 0xc4}, {&(0x7f0000005140)=""/197, 0xc5}, {&(0x7f0000005240)=""/220, 0xdc}, {&(0x7f0000005340)=""/186, 0xba}], 0x6, &(0x7f0000000bc0)=""/51, 0x33}, 0x238}, {{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000001d00)=[{0x0}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x2, &(0x7f0000001d40)=""/193, 0xc1}, 0x8}, {{&(0x7f0000001e40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000033c0), 0x0, &(0x7f0000003440)=""/240, 0xf0}, 0x96}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000035c0)=""/20, 0x14}], 0x1}, 0x8}, {{&(0x7f0000003640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000037c0), 0x0, &(0x7f0000003800)=""/41, 0x29}, 0x7}], 0x7, 0x10100, &(0x7f0000003940)) sendmsg$nl_generic(r5, &(0x7f0000004ec0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004e80)={&(0x7f00000039c0)={0x3c4, 0x14, 0x20, 0x70bd29, 0x25dfdbfe, {0x14}, [@generic="3437bf0ef88c34d241385caa64fbcba6e768edaa8cf153462bc340501e25768ea0de630ca1bbd7d7c7ff6310707547ef16a6f699ac9fe829c4fd695929595f8ab0b2a6df4a37cda275bb48996297cb96b730", @generic, @generic="bd717ceef7717031cf99ff73c2bcac95cae04f547b5febf94da9726c86e349cd9b348bf78bc8a823596b80d67bce4b114b84b17353a5975955a3f7849d4da144c29bde0d6a052131a5407b085fbb74914d954791bddd4a2c7fbaeb9bfa38e88925b798ab842f16d947650363bbdb94b362d50cbdb5734c38f77b211055cba6a7e10e1361e6fb0dd199007a34", @nested={0x2d0, 0x2c, [@generic="3282bfbe04fd82523eb6d5d11529436ef111788c9069befa04257bf6d7c8908c438d67597a54550eb3e1f8f4c6e96a846a3f1c7a5cab8e8e6567cf91e9bd7b974a8341b86c9a6a5f3e606db97d28f7bfd4bd3b43476822dac7829c5fd3c31ab4c57d1b07022d28b48b346be76ca952b2250625c7338af085a3bf99e8ba4ee38289fef49806daaf6c9027ad", @typed={0x10, 0x72, @str='/dev/ptmx\x00'}, @typed={0x5c, 0x0, @binary="509561fde0f647462b8ef84e5e955ac492ec42d59579edb600bb8b9269f2f4a9e16ff01b7e9301872309aa608beae8a6a1c4f6dcffccd973de0444e66a058d3f917dffbbcbe802844afbae88965d1f7bc2bf02aa24"}, @generic="5a0026056030710f379cb7f7ad9f020129047c8a86a5a8d15d557dede854ad8390eb0d912422d0a3c453b0e93bcdbac6aa0ce4e4825482df8ab82b9acb737b854182d657d28b265b42071cde6d1c04d5547d768782691a8073473f21c5c4c4bfc81120605d732f8d7733f78ce1cab9a65e39cd593319be2577726f3b0374ff731fccb3debe36242affbfff25f6109bae02b84d4eb5246f5c7df232bb9986bca6796e38dc20d94a7edfda7b0cb7d10839a8502f2f68d68462744ba2931884eabb9f147addba8ee0390617793c253f05ab287da98203da24c342e0e3b3d7", @typed={0x8, 0x15, @u32=0xa354}, @generic="a86afbcfaf1229e6ab11537b8a16f94d08fb6e012d2eb7751eba439ff8c69a0178390e900b81611650b3a517b222314f9771963967d0d2288c48f07826d1ded33a299792c03bfc1708c8b66bc5d0801c9bb6ca9a57cf8d795bacc98065711b5c9355e3bd53e05dc05cbc3cec812b839e5f2986ea0a", @generic, @generic="7c0d0f3471d15d24dc014acd9687f24a61608fd919e57d9bbc03cc7783ff2a428540ce23aab4a9555841d12123507673ec8225ef440045bdd77f0f01984d7a8d9408838254c754cb174a3f60f8774a50385d57edd7a44f755cb95a43edc4f0955c14b4e98b832cada3dbb30c8fb3e0f9f2bd203591519b9366"]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x7311679ee17d0fc2}, 0x4) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x1000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000003c0)=""/91) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000040)=0xc) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x5, 0x7, 0x5, 0x0, 0x0, 0x2d6, 0x0, 0x0, 0x2}) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000001c0)) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000001ec0)={0x2, &(0x7f0000001f40)=[{}, {}]}) ioprio_get$uid(0x3, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x66, 0x0, &(0x7f0000000380)) unshare(0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000580)=0x401) fcntl$setstatus(r7, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f) 13:30:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)}) 13:30:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)}) 13:30:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)}) [ 1129.273554][T24024] input: syz1 as /devices/virtual/input/input158 13:30:48 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000240)='/dev/loop-control\x00') unshare(0x40000000) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f00000002c0)=""/59, 0x14, 0x3) lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=@md5={0x1, "a80813c98a5c3d3c19c300c4a110f468"}, 0x11, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0xff66) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) 13:30:48 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2}) write$P9_RLERRORu(r1, &(0x7f00000002c0)=ANY=[], 0xfffffdf3) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1129.496922][T24077] IPVS: ftp: loaded support on port[0] = 21 13:30:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000480)="025cc83d6d345f8f762070") r3 = socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) gettid() setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0xa, 0xffff, 0x78, 0xffff, 0xfff}) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f0000000380)={0xf0, {{0x2, 0x4e22}}}, 0x84) ftruncate(r9, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0x3000}, &(0x7f0000000300)=0x100000134) sendfile(r9, r8, &(0x7f0000000040), 0x10001) read(r9, &(0x7f00000004c0)=""/252, 0xfc) dup2(r8, r2) 13:30:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:49 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) creat(0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0x800, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x2, 0xd3, 0x5}, 'syz1\x00', 0x48}) fchdir(r2) r3 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000004c0)={0x60000000}) ioprio_set$pid(0x7, 0x0, 0x5) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioprio_get$uid(0x3, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, &(0x7f0000000380)) unshare(0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000580)=0x401) fcntl$setstatus(r3, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="edadd055d2a3fac900e74fa704435100"], 0x1, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 1130.015428][T24291] input: syz1 as /devices/virtual/input/input159 13:30:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:49 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) 13:30:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1130.337896][T24508] input: syz1 as /devices/virtual/input/input160 13:30:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$sock(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)='2', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x142) 13:30:49 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x141) dup3(r0, r1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 1130.404431][ C0] net_ratelimit: 23 callbacks suppressed [ 1130.404439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.410184][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:50 executing program 4: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) connect(r1, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x2, @remote, 'vlan0\x00'}}, 0x80) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init() getrusage(0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000000500)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) open(0x0, 0x0, 0x13) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xfa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, 0x0) fstat(0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="0000040000000006a5763af841c07d429e49e4756552dcd026e1b67a2d4e0200493a0fafe77f08cd89518e9711f66ec949b5aed1f03027d700"/73], 0x8) sendmmsg(r7, &(0x7f00000092c0), 0x170, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000a40)="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", 0x117) epoll_pwait(r8, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x394b, &(0x7f0000000440)={0x4}, 0x8) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x80000001) inotify_init() r9 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r9, r9, &(0x7f00000001c0), 0xa198) 13:30:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:50 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x10000, 0x0) ustat(0x6, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) r4 = request_key(&(0x7f0000001440)='dns_resolver\x00', &(0x7f0000001480)={'syz', 0x3}, &(0x7f00000014c0)='vboxnet0@\x00', r3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001500)={r4, 0x0, 0x66}, &(0x7f0000001540)=ANY=[@ANYBLOB='enc=raw hash=tgr\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00'], &(0x7f00000017c0), &(0x7f0000001800)="6f0f14bd073231307059e78d0bb09dc05e5ab9e95f374b15253a280dae3903466bd9ce15341b3a71f0150309a8cbdf2d4477add0e13bf98914e0dc2cfd6beb53f51054957ed13cf1c03fd4c4d06de6819a5106c41143ab48351834fd0f200f87b4b54d16b1a8") prctl$PR_GET_THP_DISABLE(0x2a) pipe(&(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x8000000000002f5, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0xfff, 0x3, 0x8, 0x1000}, {0x6, 0x9, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5}, {0x80, 0x81, 0x1f, 0x7fff}, {0xeea, 0x0, 0x3f, 0x20}]}, 0x8) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) [ 1130.929871][T24834] input: syz1 as /devices/virtual/input/input161 13:30:50 executing program 4: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0xe3414ebf}, 0xfffffffffffffd27) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) quotactl(0x2080000205, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 13:30:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:50 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x0) [ 1131.284361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.284369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.284422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.290248][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.307444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.313229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.316661][T25177] input: syz1 as /devices/virtual/input/input162 13:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="390000001300090065000000000000007f008040060000004600010700000014190004000400210003f500"/57, 0x39}], 0x1) [ 1131.444365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.450203][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) write$cgroup_int(r1, &(0x7f0000000000), 0x12) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'netdevsim0\x00', 0x400}) close(r0) 13:30:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1131.620918][T25378] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1131.692281][T25381] input: syz1 as /devices/virtual/input/input163 13:30:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) 13:30:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 13:30:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 13:30:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@dev]}) 13:30:51 executing program 3: r0 = socket$inet(0x10, 0x400000200000003, 0x0) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1b0000001200030207fffd946fa28308070019006c000000020085", 0x1b}], 0x1}, 0x0) 13:30:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 13:30:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:51 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x81) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 13:30:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80e05411, 0x0) 13:30:51 executing program 4: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) getgroups(0x2, &(0x7f0000680ff0)=[0x0, 0xffffffffffffffff]) setresgid(0x0, 0x0, r0) 13:30:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:30:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:30:52 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xfc, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x2c5) 13:30:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) 13:30:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:30:52 executing program 5: r0 = socket(0x4000e, 0x0, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'veth0_to_team\x00', 0x1}, 0x65d2710472a2b326) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8_\xfd`\xd2\x1f\xaf\x1c! ') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, [@multicast2, @multicast1, @remote, @empty]}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x0, 0x104}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x6) sendmmsg$unix(r4, &(0x7f00000bd000), 0x92492492492493a, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002000)=[{&(0x7f00000003c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c262569250008000c000000000000a3c728f1c46b7b31afdc1338d54400009b0400000000000000", 0xfffffe2b}], 0x2000012b, 0x0, 0xe3}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2801) ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r8]) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x400000000000) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r7, 0x0) ftruncate(r6, 0x6) ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f0000000340)) 13:30:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:52 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aa73}], 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x46800) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x2f5fa26) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {}, [{0x8, 0xa1aa664eaaeb38a8}]}, 0x2c, 0x0) ftruncate(r4, 0x0) read(r4, &(0x7f0000000140)=""/144, 0x90) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x102, 0x9032, 0xffffffffffffffff, 0x0) 13:30:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:53 executing program 5: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x0, 0x7ff}) syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) getresuid(0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) r3 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r3, 0x0, 0x100c002, 0x0) faccessat(r3, &(0x7f000003b000)='./control\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e20, @remote}, 0x351, 0x0, 0x0, 0x0, 0x202, &(0x7f00000000c0)='tunl0\x00', 0x80000001, 0x299, 0xcabe}) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x28, 0x3) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) memfd_create(&(0x7f0000000000)='L-', 0x1) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) 13:30:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:53 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5) fchmod(r0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/57, 0xda66bfb991d4cbf) 13:30:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) lseek(r2, 0x0, 0x0) mmap(&(0x7f0000007000/0x400000)=nil, 0x400000, 0x100000a, 0x11, r5, 0x1d) read(r3, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 13:30:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:54 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x26c) 13:30:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x833e9cced8a64b44) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x0, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = memfd_create(0x0, 0x2) pipe(0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x3f, &(0x7f0000000380)="e8e60ea1e3aa46536cc4ee038abec5ad76a6a3809f95a7ee3fee6a6fb60585b597b9201a18c043f6fc5cf5a8813b03b6232ffeb61b0431eea30520e47c31febe9d6bbb94bed7a9ea25943b42d3075660bfc2ab632100a1f603b41e1d42e641d4a2a3b9c17b8b5afd8c9f8643aed442ea067bc927d21e572d96e8543a9d56df5c9dd9c1b7d24ef8de4f3579c72ded6ee9fac7876186067bfd754c68b6a967585ddff455f74eb942fbcb07a1a93530d9c45cf1f265f2d7a71a", 0xb8) r3 = fcntl$getown(r2, 0x9) rt_sigqueueinfo(r3, 0x20, &(0x7f0000000500)={0x3a, 0x8, 0x400}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000100)=0xffffffffffffff5b) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x21, 0x3) inotify_init() read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000400000000"], 0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) sendmmsg(r5, &(0x7f00000092c0), 0x170, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r6, r6, &(0x7f00000001c0), 0xa198) 13:30:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:54 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r2) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 13:30:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:54 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) [ 1135.148805][T27369] input: syz1 as /devices/virtual/input/input167 13:30:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) [ 1135.444383][ C0] net_ratelimit: 15 callbacks suppressed [ 1135.444390][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.444540][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.450153][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1135.455843][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1135.473096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.478925][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1135.614418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.620263][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:55 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xfffffe2f) unlink(&(0x7f0000000200)='./bus\x00') clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./bus\x00') ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x22) creat(&(0x7f0000000180)='./bus\x00', 0x0) 13:30:55 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x78) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x10e755) gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000140)) 13:30:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:55 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) unshare(0x600) signalfd(r0, &(0x7f00000000c0), 0x8) 13:30:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:55 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r4, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r4, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0xfffffffffffffd66) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x7, 0x396) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r6 = dup(r5) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000980), &(0x7f0000000580)=0x14) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="021380fa72b8dbc862dd50392f3017c060083f35f24dd768be6256126c23020000000002000000df25080012000000000000000000000000050000000900000001ac010000000000000000000000000000aaee7bb550075649e48881d17f3c3adcc11a9b3924f84f460f633decddfd98b1d95994976fe96ccaf300a5a29e8ee9516a5d06551a59c483095d838105d027076d5113937b562b67f9df6190751d5514636e59c184f8233dbea6534c11c60dfe69906ac3de9b8cdef2ba983fff3d9cfe60dda1a3a704a6807184c69b5128ff71feed2e80ce14c0f7c86aaa404669ce687818626ebe2bc0824c5b098e9b92b32a35619b49135765dce3ce15bcfe2242f161fae5eea2c4b6d667732ecbe6116cc2677af8e8cfd150138988542d01440d3941b24b161fd224b71468af19c1ccc2e45b3e91a2e1c34c654829f281e571341d3753096cae1ff96310aabeb94eb96d633a4675248dcac1bb73ebf33d1aa85e79aba72b13d2cf74ca711ab06bf6265fd37d600040ab54b4962d983d26660fcda17f6eeedeea470f599f499e8a7e17486b087b5c99979659d76fc58461d6df2f9b4a9d64491391d98005a59365b5c03bd176a007088cd3b7d663e8206d387386f003e5a31fad9beb036a12032e95836afb35189110c95316dfa321daa39e25f0c2dedda6b4ccd87495b338ebcd5fb8fbab76c404776c63f2ea0147283234b7293e35858685d79ea45394dcdbab3b55f6e00889ff09f45381c1d3b48def309c682aeb98458073e5eb6ab22adb29908e0bead584f35e44fde0d4bbf6bd7aad358c7299ae89e995a3620828a85d9f2257bd68d2600bea7fa1c5a5b67dd23c8ad3584e8c1545190f000075b22f57071b2f14e5a9f27d269e4289c283372116c95a7758ac19eb91513063a5eb530e1e54fcb804571c7d06ebdf5b2107dd62ca85be6e67b2449a6ac6eff9f9f3e94463c4ca6283b4961e7cc46cc6f05eea3385f2ad912c9586770ad38f2202e7df40e601010a8c916729b485c5f2e26f8a7d12fb471def781dd3"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000640)=0x1) r8 = inotify_init() lseek(r8, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) r9 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r9, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000080)=0xffffffffffffff9f) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r10, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @timestamp, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r10, r10) fcntl$setpipe(r10, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000340), &(0x7f00000004c0)=0x40) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00'}) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r12, 0x100, &(0x7f0000000240)="5c010000000000000600006b35d4c055b3d9a5fb292ea1edfcc8b3f73b1474c1697e26d9edf847d512567974d58ffd7ed4d1ecbfa26461b48795537fdca4bc32184c8d09b14d5c6bf5e59638ec3908eff095c6557c321300f7") r13 = socket(0x18, 0x0, 0x3) poll(&(0x7f0000000300)=[{r12}], 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000540)=0xe8) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000580)={'caif0\x00', r14}) r15 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r15, 0x29, 0x4b, &(0x7f0000000200)=0x6, 0x4) bind$inet6(r15, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r15, 0x29, 0x32, &(0x7f0000000500)={@remote, r14}, 0x14) ftruncate(r11, 0x2007fff) sendfile(r6, r11, 0x0, 0x8000fffffffe) [ 1136.244401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.250240][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:55 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="67446698000000000400000003000000209f52afe9e4cfd07b5cf8cd9762139bcddff5f587b6fb484996f6424b5d914f49cf3e80f3122d573e425b4c86052de1fd2543a3b8d52a858e4d627caf3a87a5e1b58b3be5d855cd04a27a34762d68a708d920303218ef1a4922d54c0970021397225e"], 0x1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) wait4(r5, &(0x7f0000000400), 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0x13) pipe(0x0) pipe(&(0x7f00000001c0)) creat(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000140)=""/98) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 13:30:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:58 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:30:58 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:58 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:30:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)="f4", 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 13:30:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:58 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000016000)={0x1, &(0x7f00001e0fe8)=[{0x4000000000006, 0x0, 0x0, 0x7ffff7ff00000}]}) 13:30:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:58 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r2, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:30:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:30:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 13:30:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1140.804452][ C0] net_ratelimit: 24 callbacks suppressed [ 1140.804460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.815976][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:01 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 13:31:01 executing program 3: pipe(&(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) 13:31:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1141.844917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.850795][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 13:31:01 executing program 5: keyctl$instantiate(0xc, 0x0, 0xffffffffffffffff, 0xfffffffffffffee3, 0x0) 13:31:01 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000000)) wait4(0x0, &(0x7f0000000180), 0xc000000a, &(0x7f0000000640)) 13:31:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 13:31:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:04 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x9) r1 = dup(r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) 13:31:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 13:31:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 13:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 13:31:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:04 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 13:31:05 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:05 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) [ 1145.844380][ C0] net_ratelimit: 15 callbacks suppressed [ 1145.844388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.844427][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.850096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.855912][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.873074][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1146.004413][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.010338][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 13:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3], 0x2}}, 0x0) 13:31:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) [ 1146.644365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.650252][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3], 0x2}}, 0x0) 13:31:06 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:06 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:06 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3], 0x2}}, 0x0) 13:31:06 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) [ 1147.044381][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:31:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:06 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:06 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) 13:31:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:06 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) 13:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:07 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) 13:31:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:07 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaa"], 0x3}}, 0x0) 13:31:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:07 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaa"], 0x3}}, 0x0) 13:31:08 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:08 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaa"], 0x3}}, 0x0) 13:31:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:08 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:09 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa00000014"], 0x3}}, 0x0) 13:31:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:09 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x9f}) 13:31:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa00000014"], 0x3}}, 0x0) 13:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:09 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 13:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa00000014"], 0x3}}, 0x0) 13:31:09 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 13:31:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f"], 0x3}}, 0x0) 13:31:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) [ 1151.214384][ C0] net_ratelimit: 22 callbacks suppressed [ 1151.214393][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.226011][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) 13:31:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f"], 0x3}}, 0x0) 13:31:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:10 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f"], 0x3}}, 0x0) 13:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)) 13:31:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) [ 1152.084401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.090251][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.094357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.096099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.101766][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.107484][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.244411][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.250295][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:13 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)) 13:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f3100"], 0x3}}, 0x0) 13:31:13 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)) 13:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f3100"], 0x3}}, 0x0) 13:31:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f3100"], 0x3}}, 0x0) 13:31:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="006d656d6f727920d5ac3c87683a4251072d42c213c4655122111e308ec79d0c81e240aec9145ab4070400000000000000adc42506f9b54c20fe51c8e52a8cbfeef780f281e3ee79c09bc7d7bef9af3461c4f6df93de91b806894fe590b0ba28"], 0x60) openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r4 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r2, 0x0, 0x0) [ 1156.244422][ C0] net_ratelimit: 14 callbacks suppressed [ 1156.244431][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.254401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.256040][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.261685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.273191][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.278975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.404426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.410318][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:16 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:16 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000140)=0x31c) 13:31:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x2}}, 0x0) 13:31:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1157.044372][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.050240][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x2}}, 0x0) 13:31:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:16 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005d40), 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) vmsplice(0xffffffffffffffff, &(0x7f0000001580)=[{0x0}, {0x0}, {&(0x7f00000002c0)="c3253ecd9cabe0771a", 0x9}, {&(0x7f0000000580)}], 0x4, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 13:31:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x2}}, 0x0) 13:31:16 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:16 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 13:31:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:31:19 executing program 3: keyctl$get_persistent(0x16, 0xee00, 0x0) 13:31:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:19 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8), 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:19 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:19 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 13:31:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x18, 0x100, 0x4, 0x0, 0x0, 0x1, 0x8}, 0x235) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 13:31:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:31:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000140)=0x31c) 13:31:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff5a, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba5000000000000", @ANYRES32, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x40}}, 0x0) 13:31:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, &(0x7f0000000140)=0x31c) [ 1161.604466][ C0] net_ratelimit: 22 callbacks suppressed [ 1161.604473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.616042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.484409][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.490271][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.494370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.496124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.501764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.507488][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.654465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.660307][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:22 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:22 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8), 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, &(0x7f0000000140)=0x31c) 13:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x2}}, 0x0) 13:31:22 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r0, 0x1000000000016) 13:31:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1163.248779][T30721] ptrace attach of "/root/syz-executor.3"[8633] was attempted by "/root/syz-executor.3"[30721] 13:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, &(0x7f0000000140)=0x31c) 13:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x2}}, 0x0) 13:31:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, {{0x2, 0x0, @remote}}}, 0x108) ioctl$KVM_RUN(r2, 0x8090ae81, 0x20000000) 13:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, 0x0) 13:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x2}}, 0x0) 13:31:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, 0x0) 13:31:25 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8), 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, {{0x2, 0x0, @remote}}}, 0x108) ioctl$KVM_RUN(r2, 0x8090ae81, 0x20000000) 13:31:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x42, 0x0, 0x0) 13:31:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:25 executing program 5: 13:31:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:25 executing program 3: 13:31:25 executing program 5: 13:31:26 executing program 3: [ 1166.644415][ C1] net_ratelimit: 16 callbacks suppressed [ 1166.644422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.644485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.650204][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.655917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.661704][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.678853][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:26 executing program 5: [ 1166.804391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.810249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.444434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.450241][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:28 executing program 5: 13:31:28 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea7", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:28 executing program 3: 13:31:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:28 executing program 3: 13:31:28 executing program 5: 13:31:28 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:29 executing program 5: 13:31:29 executing program 3: 13:31:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea7", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:29 executing program 5: 13:31:29 executing program 3: 13:31:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea7", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:29 executing program 3: 13:31:29 executing program 5: 13:31:29 executing program 5: 13:31:29 executing program 3: 13:31:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba500", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:29 executing program 5: 13:31:29 executing program 3: 13:31:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:30 executing program 5: 13:31:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba500", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:30 executing program 3: 13:31:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:30 executing program 3: 13:31:30 executing program 5: 13:31:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba500", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:30 executing program 3: 13:31:30 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_TSC(0x19, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000004000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000282, 0x0) 13:31:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:31 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 13:31:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba500000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:31 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_TSC(0x19, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000004000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000282, 0x0) [ 1172.004390][ C0] net_ratelimit: 23 callbacks suppressed [ 1172.004398][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.016041][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:31 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba500000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x16, 0x0, 0x0) 13:31:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:31:31 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_extract_tcp_res(0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x60, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x40) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x64, 0x0, &(0x7f0000000540)=[@decrefs, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x0, 0x2, 0x39}, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/208, 0xd0, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @clear_death={0x400c630f, 0x1}], 0xf80, 0x0, &(0x7f00000005c0)="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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x100000001) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x7, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) [ 1172.386895][T31644] binder: 31598:31644 ioctl c018620b 0 returned -14 13:31:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba500000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x31, 0x0, 0x0) 13:31:32 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_extract_tcp_res(0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x60, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x40) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x64, 0x0, &(0x7f0000000540)=[@decrefs, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x0, 0x2, 0x39}, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/208, 0xd0, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @clear_death={0x400c630f, 0x1}], 0xf80, 0x0, &(0x7f00000005c0)="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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x100000001) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x7, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) [ 1172.884387][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.884447][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.890221][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.901763][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.907596][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_extract_tcp_res(0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x60, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x40) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x64, 0x0, &(0x7f0000000540)=[@decrefs, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x0, 0x2, 0x39}, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/208, 0xd0, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @clear_death={0x400c630f, 0x1}], 0xf80, 0x0, &(0x7f00000005c0)="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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x100000001) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x7, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) 13:31:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba50000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) [ 1173.044407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.050285][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:32 executing program 5: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffedd, 0x0) 13:31:32 executing program 3: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@umask={'umask'}}]}) 13:31:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba50000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) [ 1173.684497][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:31:34 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 13:31:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000001300280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001007ea779066ba50000000000", @ANYRES32=r3, @ANYBLOB="00000020000000000c000140aaaaaaaaaa000000140003002f310000"], 0x3}}, 0x0) 13:31:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={[{@uni_xlateno='uni_xlate=0'}], [{@pcr={'pcr'}}]}) 13:31:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1175.468971][T32208] FAT-fs (loop5): Unrecognized mount option "pcr=00000000000000000000" or missing value 13:31:34 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 13:31:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 13:31:35 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x37, 0x0, 0x168}, 0x9d}], 0x40000000000017d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) creat(0x0, 0x0) 13:31:35 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 13:31:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8202adfdffffffffffffff6530130fb9aa23d0571454d78a2a197a386207000000008295955984c87910bf093f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58b55c62bffa4d012ae447473c230495aaee48c02f6ac41e6bf3bf554799b9b800ed52beb85a85e25bfb258557d60f13ad30505e8f53f8a4aeef9d612f871f4385f04157795ea4a5c59a3a9fa202361ca1d8cac7dbbc5b65c6593d2870b4122cd23500000000000000000000080000000000"], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 13:31:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) [ 1177.044377][ C1] net_ratelimit: 14 callbacks suppressed [ 1177.044385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.044425][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.050087][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.067321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.073054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.214402][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.220264][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.844425][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.850286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.244477][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:31:37 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x10) dup2(r1, r0) r2 = dup(r0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 13:31:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x4081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003e00200025bd7000fedbdf25480e771b"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x20000c10) accept4$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e, 0x181400) r2 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000300)='\x00', 0xffffff0c, 0x3) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') geteuid() geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000bc0)={@rand_addr="0addcc20d0fdaafd16c49fd62fe4d1bf", 0x63}) keyctl$join(0x1, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) 13:31:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:31:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:37 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, 0x0, 0x0) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300), 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000004000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000282, 0x0) [ 1178.541822][ T305] device lo left promiscuous mode 13:31:38 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unlink(0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, 0x0, 0x0) request_key(&(0x7f0000000040)='.dead\x00', 0x0, &(0x7f0000000200)='/\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000004000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000282, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000000)) tee(r1, 0xffffffffffffffff, 0x5, 0x0) 13:31:38 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, 0x0, 0x0) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300), 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000004000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000282, 0x0) 13:31:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:31:38 executing program 5: 13:31:38 executing program 5: 13:31:38 executing program 5: 13:31:40 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:31:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1182.404400][ C0] net_ratelimit: 23 callbacks suppressed [ 1182.404409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.415901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.284377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.284671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.290184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.296189][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.301713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.313136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.444388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.450209][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.379827][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.444413][ C1] net_ratelimit: 16 callbacks suppressed [ 1187.444423][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.444628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.450285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.450383][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.456596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.461845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.604397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.610221][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.244389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.250263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1192.805158][ C0] net_ratelimit: 24 callbacks suppressed [ 1192.805204][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1192.817470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1193.684492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.684897][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.690312][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1193.696329][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1193.708574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.714779][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1193.844402][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.850232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1197.844368][ C1] net_ratelimit: 16 callbacks suppressed [ 1197.844377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.844703][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.850193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1197.856005][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1197.861710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.879386][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1198.004364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1198.010219][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1198.645221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1198.651685][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1203.204830][ C0] net_ratelimit: 23 callbacks suppressed [ 1203.204902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1203.217021][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:32:03 executing program 3: 13:32:03 executing program 5: 13:32:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:32:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:03 executing program 2: [ 1204.084370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.084681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.090177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1204.096152][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:32:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:32:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3d, 0x0, &(0x7f0000000140)=0x31c) 13:32:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000880)='/dev/urandom\x00', 0x0, 0x0) dup3(r2, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101000, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000880)='/dev/urandom\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x9, 0x40) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4) clone(0x204, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file1\x00') r4 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) close(r4) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) open$dir(0x0, 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) write$P9_RREAD(r6, 0x0, 0x0) [ 1204.244413][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.250229][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x200000000001, r1, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x3c) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) write$cgroup_int(r3, 0x0, 0x0) 13:32:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffef}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="006d656d6f727920d5ac3c87683a4251072d42c213c4655122111e308ec79d0c81e240aec9145ab4070400000000000000adc42506f9b54c20fe51c8e52a8cbfeef780f281e3ee79c09bc7d7bef9af3461c4f6df93de91b806894fe590b0ba28"], 0x60) openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r4 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r2, 0x0, 0x0) 13:32:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @random="230433c79e99", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 13:32:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x4]}, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}, 0xfec0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0xf0, 0x0) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r5, 0x0, 0x15, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0xffffffffffffffff}, 0x30) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0xf0, 0x0) close(r7) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f00000000c0)) r8 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440)=r8, 0x12) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3f, 0x5, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0x10000, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x7, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @perf_config_ext={0x8ab, 0x5}, 0x24800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x667a}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='memory.stat\x00', 0x0, 0x0) r11 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x801c581f, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='memory'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r11, r10, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x0, 0xc, &(0x7f00000000c0)='cgroup.stat\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r6, r7, 0x0, 0xd, &(0x7f0000000380)='securityproc\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r2, 0x0, 0x0) 13:32:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:32:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @random="230433c79e99", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) [ 1204.884389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.890288][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:32:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:32:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @random="230433c79e99", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 13:32:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @random="230433c79e99", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 13:32:04 executing program 5: 13:32:04 executing program 3: 13:32:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:04 executing program 2: 13:32:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:32:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) 13:32:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x25, 0x0, &(0x7f0000000140)=0x31c) 13:32:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:32:05 executing program 5: 13:32:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) syz_open_pts(r0, 0xd0880) 13:32:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 13:32:05 executing program 3: 13:32:05 executing program 3: 13:32:05 executing program 5: 13:32:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:32:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, &(0x7f0000046000)) 13:32:05 executing program 2: 13:32:05 executing program 5: 13:32:05 executing program 3: 13:32:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, 0x0, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:32:06 executing program 3: 13:32:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, &(0x7f0000046000)) 13:32:06 executing program 5: 13:32:06 executing program 2: 13:32:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:32:06 executing program 5: 13:32:06 executing program 2: 13:32:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8004005) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x17c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x1f4) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000300)) r4 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 13:32:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, &(0x7f0000046000)) 13:32:06 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) ftruncate(r1, 0x40000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0xfffffffffffffd76) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x1, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00']}, 0x79) sendfile(r0, r1, 0x0, 0xffe4) 13:32:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24}, 0x24}}, 0x0) 13:32:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x48) fcntl$setstatus(r0, 0x4, 0x2002) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, 0x0, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:32:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x4, 0x800000000105082) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/156) sendfile(r0, r0, 0x0, 0x3975f324) 13:32:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) 13:32:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 13:32:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x81000) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000070000000900000014140000000000"], 0x18}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x8, 0x4, [@dev]}]}}}], 0x18}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff, 0x1}) syz_open_dev$mice(0x0, 0x0, 0x2b4000) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000480)={'\xbbj', 0xffff7ffffffffff9}, 0x28, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) getrusage(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x20) fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:32:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2880000aaaaaaaaaabb86dd60b4091d00303a0002000000000000000000000000000000ff02000000000000000000000000000180009078000904006000000000000000000000000000552ea839ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 13:32:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x15e, &(0x7f0000000000)=[@op={0x18}], 0x1}], 0x49249249249265b, 0x0) [ 1207.891588][ T2185] ================================================================== [ 1207.900295][ T2185] BUG: KASAN: use-after-free in nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1207.908662][ T2185] Read of size 1 at addr ffff888098969b04 by task syz-executor.2/2185 [ 1207.916817][ T2185] [ 1207.919156][ T2185] CPU: 1 PID: 2185 Comm: syz-executor.2 Not tainted 5.4.0-rc4-next-20191024 #0 [ 1207.928083][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.938505][ T2185] Call Trace: [ 1207.941819][ T2185] dump_stack+0x172/0x1f0 [ 1207.946178][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1207.952185][ T2185] print_address_description.constprop.0.cold+0xd4/0x30b [ 1207.959214][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1207.965201][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1207.971173][ T2185] __kasan_report.cold+0x1b/0x41 [ 1207.976113][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1207.982108][ T2185] kasan_report+0x12/0x20 [ 1207.986459][ T2185] __asan_report_load1_noabort+0x14/0x20 [ 1207.992106][ T2185] nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1207.998281][ T2185] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 1208.004708][ T2185] ? nf_nat_inet_fn+0x211/0x8b0 [ 1208.009549][ T2185] nf_confirm+0x3d8/0x4d0 [ 1208.013884][ T2185] ipv4_confirm+0x14c/0x240 [ 1208.018390][ T2185] nf_hook_slow+0xbc/0x1e0 [ 1208.022829][ T2185] ip_local_deliver+0x352/0x520 [ 1208.027676][ T2185] ? ip_local_deliver_finish+0x380/0x380 [ 1208.033306][ T2185] ? ip_protocol_deliver_rcu+0x880/0x880 [ 1208.038943][ T2185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.045186][ T2185] ? __this_cpu_preempt_check+0x35/0x190 [ 1208.050817][ T2185] ip_sublist_rcv_finish+0x9b/0x2d0 [ 1208.056026][ T2185] ip_sublist_rcv+0x27d/0x940 [ 1208.060717][ T2185] ? ip_rcv_finish+0x2f0/0x2f0 [ 1208.065498][ T2185] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1208.071755][ T2185] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1208.077305][ T2185] ? ip_rcv_finish_core.isra.0+0x1b70/0x1b70 [ 1208.083286][ T2185] ? ip_rcv_core.isra.0+0x878/0xc80 [ 1208.088480][ T2185] ip_list_rcv+0x370/0x4ac [ 1208.092883][ T2185] ? consume_skb+0x11/0x3b0 [ 1208.097382][ T2185] ? ip_rcv+0x3f0/0x3f0 [ 1208.101547][ T2185] ? ip_rcv+0x3f0/0x3f0 [ 1208.105701][ T2185] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 1208.111713][ T2185] ? process_backlog+0x750/0x750 [ 1208.116662][ T2185] ? lock_acquire+0x190/0x410 [ 1208.121337][ T2185] ? __kasan_check_read+0x11/0x20 [ 1208.126356][ T2185] netif_receive_skb_list_internal+0x7eb/0xe50 [ 1208.132512][ T2185] ? __netif_receive_skb_list_core+0x9d0/0x9d0 [ 1208.138660][ T2185] ? ipv6_gro_receive+0x96f/0x14f0 [ 1208.143770][ T2185] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1208.150008][ T2185] ? eth_type_trans+0x3a5/0x760 [ 1208.154862][ T2185] gro_normal_list.part.0+0x1e/0xb0 [ 1208.160086][ T2185] gro_normal_one+0x184/0x1d0 [ 1208.164765][ T2185] napi_gro_frags+0x915/0xd00 [ 1208.169432][ T2185] tun_get_user+0x2e8e/0x3f80 [ 1208.174093][ T2185] ? __kasan_check_read+0x11/0x20 [ 1208.179132][ T2185] ? tun_build_skb.isra.0+0x1380/0x1380 [ 1208.184679][ T2185] ? rcu_read_lock_held+0x9c/0xb0 [ 1208.189697][ T2185] ? __kasan_check_read+0x11/0x20 [ 1208.194735][ T2185] tun_chr_write_iter+0xbd/0x156 [ 1208.199679][ T2185] do_iter_readv_writev+0x5f8/0x8f0 [ 1208.204886][ T2185] ? no_seek_end_llseek_size+0x70/0x70 [ 1208.210394][ T2185] ? apparmor_file_permission+0x25/0x30 [ 1208.216031][ T2185] ? rw_verify_area+0x126/0x360 [ 1208.220889][ T2185] do_iter_write+0x184/0x610 [ 1208.225482][ T2185] ? dup_iter+0x260/0x260 [ 1208.229817][ T2185] vfs_writev+0x1b3/0x2f0 [ 1208.234141][ T2185] ? vfs_iter_write+0xb0/0xb0 [ 1208.238807][ T2185] ? __kasan_check_read+0x11/0x20 [ 1208.243831][ T2185] ? ksys_dup3+0x3e0/0x3e0 [ 1208.244398][ C0] net_ratelimit: 12 callbacks suppressed [ 1208.244406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1208.248258][ T2185] ? __kasan_check_read+0x11/0x20 [ 1208.248293][ T2185] ? __fget_light+0x1a9/0x230 [ 1208.248310][ T2185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.248327][ T2185] do_writev+0x15b/0x330 [ 1208.254010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1208.259657][ T2185] ? vfs_writev+0x2f0/0x2f0 [ 1208.259673][ T2185] ? do_syscall_64+0x26/0x760 [ 1208.259688][ T2185] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1208.259704][ T2185] ? do_syscall_64+0x26/0x760 [ 1208.259723][ T2185] __x64_sys_writev+0x75/0xb0 [ 1208.310312][ T2185] do_syscall_64+0xfa/0x760 [ 1208.314842][ T2185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1208.320728][ T2185] RIP: 0033:0x459db1 [ 1208.324618][ T2185] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1208.344223][ T2185] RSP: 002b:00007f3fa5272ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1208.352634][ T2185] RAX: ffffffffffffffda RBX: 0000000000000066 RCX: 0000000000459db1 [ 1208.360593][ T2185] RDX: 0000000000000001 RSI: 00007f3fa5272c00 RDI: 00000000000000f0 [ 1208.368566][ T2185] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1208.376589][ T2185] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f3fa52736d4 [ 1208.384565][ T2185] R13: 00000000004c922e R14: 00000000004e0860 R15: 00000000ffffffff [ 1208.392565][ T2185] [ 1208.394896][ T2185] Allocated by task 2185: [ 1208.399224][ T2185] save_stack+0x23/0x90 [ 1208.403375][ T2185] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1208.409001][ T2185] kasan_krealloc+0x84/0xc0 [ 1208.413504][ T2185] krealloc+0xa6/0xd0 [ 1208.417478][ T2185] nf_ct_ext_add+0x2c7/0x630 [ 1208.422064][ T2185] init_conntrack.isra.0+0x5ed/0x11a0 [ 1208.427428][ T2185] nf_conntrack_in+0xd94/0x1460 [ 1208.432272][ T2185] ipv4_conntrack_in+0x1e/0x30 [ 1208.437017][ T2185] nf_hook_slow+0xbc/0x1e0 [ 1208.441413][ T2185] nf_hook_slow_list+0x1d9/0x480 [ 1208.446346][ T2185] ip_sublist_rcv+0x66e/0x940 [ 1208.451290][ T2185] ip_list_rcv+0x370/0x4ac [ 1208.455691][ T2185] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 1208.461671][ T2185] netif_receive_skb_list_internal+0x7eb/0xe50 [ 1208.467831][ T2185] gro_normal_list.part.0+0x1e/0xb0 [ 1208.473031][ T2185] gro_normal_one+0x184/0x1d0 [ 1208.477710][ T2185] napi_gro_frags+0x915/0xd00 [ 1208.482368][ T2185] tun_get_user+0x2e8e/0x3f80 [ 1208.487040][ T2185] tun_chr_write_iter+0xbd/0x156 [ 1208.491995][ T2185] do_iter_readv_writev+0x5f8/0x8f0 [ 1208.497190][ T2185] do_iter_write+0x184/0x610 [ 1208.501783][ T2185] vfs_writev+0x1b3/0x2f0 [ 1208.506123][ T2185] do_writev+0x15b/0x330 [ 1208.510385][ T2185] __x64_sys_writev+0x75/0xb0 [ 1208.515200][ T2185] do_syscall_64+0xfa/0x760 [ 1208.519763][ T2185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1208.525636][ T2185] [ 1208.527965][ T2185] Freed by task 2185: [ 1208.531983][ T2185] save_stack+0x23/0x90 [ 1208.536119][ T2185] __kasan_slab_free+0x102/0x150 [ 1208.541035][ T2185] kasan_slab_free+0xe/0x10 [ 1208.545530][ T2185] kfree+0x10a/0x2c0 [ 1208.549437][ T2185] nf_ct_ext_destroy+0x2ab/0x2e0 [ 1208.554375][ T2185] nf_conntrack_free+0x8f/0xe0 [ 1208.559129][ T2185] destroy_conntrack+0x1a2/0x270 [ 1208.564057][ T2185] nf_conntrack_destroy+0xed/0x230 [ 1208.569171][ T2185] __nf_conntrack_confirm+0x21ca/0x2830 [ 1208.574717][ T2185] nf_confirm+0x3e7/0x4d0 [ 1208.579035][ T2185] ipv4_confirm+0x14c/0x240 [ 1208.583518][ T2185] nf_hook_slow+0xbc/0x1e0 [ 1208.587944][ T2185] ip_local_deliver+0x352/0x520 [ 1208.592797][ T2185] ip_sublist_rcv_finish+0x9b/0x2d0 [ 1208.597995][ T2185] ip_sublist_rcv+0x27d/0x940 [ 1208.602668][ T2185] ip_list_rcv+0x370/0x4ac [ 1208.607084][ T2185] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 1208.613064][ T2185] netif_receive_skb_list_internal+0x7eb/0xe50 [ 1208.619213][ T2185] gro_normal_list.part.0+0x1e/0xb0 [ 1208.624405][ T2185] gro_normal_one+0x184/0x1d0 [ 1208.629087][ T2185] napi_gro_frags+0x915/0xd00 [ 1208.633756][ T2185] tun_get_user+0x2e8e/0x3f80 [ 1208.638412][ T2185] tun_chr_write_iter+0xbd/0x156 [ 1208.643352][ T2185] do_iter_readv_writev+0x5f8/0x8f0 [ 1208.648541][ T2185] do_iter_write+0x184/0x610 [ 1208.653121][ T2185] vfs_writev+0x1b3/0x2f0 [ 1208.657434][ T2185] do_writev+0x15b/0x330 [ 1208.661657][ T2185] __x64_sys_writev+0x75/0xb0 [ 1208.666330][ T2185] do_syscall_64+0xfa/0x760 [ 1208.670828][ T2185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1208.676693][ T2185] [ 1208.679002][ T2185] The buggy address belongs to the object at ffff888098969b00 [ 1208.679002][ T2185] which belongs to the cache kmalloc-128 of size 128 [ 1208.693224][ T2185] The buggy address is located 4 bytes inside of [ 1208.693224][ T2185] 128-byte region [ffff888098969b00, ffff888098969b80) [ 1208.706326][ T2185] The buggy address belongs to the page: [ 1208.711985][ T2185] page:ffffea0002625a40 refcount:1 mapcount:0 mapping:ffff8880aa400700 index:0x0 [ 1208.721091][ T2185] flags: 0x1fffc0000000200(slab) [ 1208.726039][ T2185] raw: 01fffc0000000200 ffffea00028f8848 ffffea00025a7608 ffff8880aa400700 [ 1208.734747][ T2185] raw: 0000000000000000 ffff888098969000 0000000100000010 0000000000000000 [ 1208.743333][ T2185] page dumped because: kasan: bad access detected [ 1208.749745][ T2185] [ 1208.752072][ T2185] Memory state around the buggy address: [ 1208.757799][ T2185] ffff888098969a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 1208.765904][ T2185] ffff888098969a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1208.773953][ T2185] >ffff888098969b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1208.781996][ T2185] ^ [ 1208.786072][ T2185] ffff888098969b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1208.794250][ T2185] ffff888098969c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1208.802830][ T2185] ================================================================== [ 1208.810938][ T2185] Disabling lock debugging due to kernel taint [ 1208.817187][ T2185] Kernel panic - not syncing: panic_on_warn set ... [ 1208.823788][ T2185] CPU: 1 PID: 2185 Comm: syz-executor.2 Tainted: G B 5.4.0-rc4-next-20191024 #0 [ 1208.834111][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.844172][ T2185] Call Trace: [ 1208.847485][ T2185] dump_stack+0x172/0x1f0 [ 1208.851827][ T2185] panic+0x2e3/0x75c [ 1208.855731][ T2185] ? add_taint.cold+0x16/0x16 [ 1208.860416][ T2185] ? retint_kernel+0x2b/0x2b [ 1208.865021][ T2185] ? trace_hardirqs_on+0x5e/0x240 [ 1208.870064][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1208.876061][ T2185] end_report+0x47/0x4f [ 1208.880228][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1208.886226][ T2185] __kasan_report.cold+0xe/0x41 [ 1208.891094][ T2185] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1208.897084][ T2185] kasan_report+0x12/0x20 [ 1208.901437][ T2185] __asan_report_load1_noabort+0x14/0x20 [ 1208.907087][ T2185] nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 1208.912912][ T2185] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 1208.919367][ T2185] ? nf_nat_inet_fn+0x211/0x8b0 [ 1208.924231][ T2185] nf_confirm+0x3d8/0x4d0 [ 1208.928591][ T2185] ipv4_confirm+0x14c/0x240 [ 1208.933107][ T2185] nf_hook_slow+0xbc/0x1e0 [ 1208.937535][ T2185] ip_local_deliver+0x352/0x520 [ 1208.942379][ T2185] ? ip_local_deliver_finish+0x380/0x380 [ 1208.948002][ T2185] ? ip_protocol_deliver_rcu+0x880/0x880 [ 1208.953619][ T2185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.959844][ T2185] ? __this_cpu_preempt_check+0x35/0x190 [ 1208.965462][ T2185] ip_sublist_rcv_finish+0x9b/0x2d0 [ 1208.970641][ T2185] ip_sublist_rcv+0x27d/0x940 [ 1208.975310][ T2185] ? ip_rcv_finish+0x2f0/0x2f0 [ 1208.980068][ T2185] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1208.986307][ T2185] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1208.991833][ T2185] ? ip_rcv_finish_core.isra.0+0x1b70/0x1b70 [ 1208.997804][ T2185] ? ip_rcv_core.isra.0+0x878/0xc80 [ 1209.003445][ T2185] ip_list_rcv+0x370/0x4ac [ 1209.007871][ T2185] ? consume_skb+0x11/0x3b0 [ 1209.012382][ T2185] ? ip_rcv+0x3f0/0x3f0 [ 1209.016542][ T2185] ? ip_rcv+0x3f0/0x3f0 [ 1209.020705][ T2185] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 1209.026697][ T2185] ? process_backlog+0x750/0x750 [ 1209.031621][ T2185] ? lock_acquire+0x190/0x410 [ 1209.036282][ T2185] ? __kasan_check_read+0x11/0x20 [ 1209.041294][ T2185] netif_receive_skb_list_internal+0x7eb/0xe50 [ 1209.044333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1209.047436][ T2185] ? __netif_receive_skb_list_core+0x9d0/0x9d0 [ 1209.053175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1209.059260][ T2185] ? ipv6_gro_receive+0x96f/0x14f0 [ 1209.059277][ T2185] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1209.059289][ T2185] ? eth_type_trans+0x3a5/0x760 [ 1209.059307][ T2185] gro_normal_list.part.0+0x1e/0xb0 [ 1209.086269][ T2185] gro_normal_one+0x184/0x1d0 [ 1209.090929][ T2185] napi_gro_frags+0x915/0xd00 [ 1209.095593][ T2185] tun_get_user+0x2e8e/0x3f80 [ 1209.100252][ T2185] ? __kasan_check_read+0x11/0x20 [ 1209.105261][ T2185] ? tun_build_skb.isra.0+0x1380/0x1380 [ 1209.110790][ T2185] ? rcu_read_lock_held+0x9c/0xb0 [ 1209.115793][ T2185] ? __kasan_check_read+0x11/0x20 [ 1209.120801][ T2185] tun_chr_write_iter+0xbd/0x156 [ 1209.125717][ T2185] do_iter_readv_writev+0x5f8/0x8f0 [ 1209.130893][ T2185] ? no_seek_end_llseek_size+0x70/0x70 [ 1209.136335][ T2185] ? apparmor_file_permission+0x25/0x30 [ 1209.141859][ T2185] ? rw_verify_area+0x126/0x360 [ 1209.146687][ T2185] do_iter_write+0x184/0x610 [ 1209.151268][ T2185] ? dup_iter+0x260/0x260 [ 1209.155584][ T2185] vfs_writev+0x1b3/0x2f0 [ 1209.159894][ T2185] ? vfs_iter_write+0xb0/0xb0 [ 1209.164549][ T2185] ? __kasan_check_read+0x11/0x20 [ 1209.169571][ T2185] ? ksys_dup3+0x3e0/0x3e0 [ 1209.173972][ T2185] ? __kasan_check_read+0x11/0x20 [ 1209.178973][ T2185] ? __fget_light+0x1a9/0x230 [ 1209.183626][ T2185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.189933][ T2185] do_writev+0x15b/0x330 [ 1209.194152][ T2185] ? vfs_writev+0x2f0/0x2f0 [ 1209.198636][ T2185] ? do_syscall_64+0x26/0x760 [ 1209.203293][ T2185] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1209.209338][ T2185] ? do_syscall_64+0x26/0x760 [ 1209.213994][ T2185] __x64_sys_writev+0x75/0xb0 [ 1209.218649][ T2185] do_syscall_64+0xfa/0x760 [ 1209.223134][ T2185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1209.229004][ T2185] RIP: 0033:0x459db1 [ 1209.232881][ T2185] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1209.252461][ T2185] RSP: 002b:00007f3fa5272ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1209.260848][ T2185] RAX: ffffffffffffffda RBX: 0000000000000066 RCX: 0000000000459db1 [ 1209.268798][ T2185] RDX: 0000000000000001 RSI: 00007f3fa5272c00 RDI: 00000000000000f0 [ 1209.276748][ T2185] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1209.284699][ T2185] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f3fa52736d4 [ 1209.292663][ T2185] R13: 00000000004c922e R14: 00000000004e0860 R15: 00000000ffffffff [ 1209.302107][ T2185] Kernel Offset: disabled [ 1209.306430][ T2185] Rebooting in 86400 seconds..