y, dev hsr_slave_1 12:35:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:35:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:40 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:40 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:40 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:40 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)) [ 2646.930137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2646.935941][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:35:40 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:40 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) [ 2647.330117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2647.335940][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:35:40 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 12:35:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) [ 2647.810100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2647.815896][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2651.490135][ C1] net_ratelimit: 16 callbacks suppressed [ 2651.490144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2651.501640][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2651.970133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2651.975923][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.370138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.375960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.620160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.625971][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2653.170138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2653.175946][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:35:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:46 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r2 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:46 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x0) [ 2653.349336][T21381] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 12:35:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:46 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) [ 2653.572965][T21468] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 12:35:46 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) 12:35:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) [ 2656.530138][ C1] net_ratelimit: 14 callbacks suppressed [ 2656.535863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.541632][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.770165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.776003][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2657.330154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2657.335952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2657.730122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2657.735912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2658.210145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2658.215975][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:35:52 executing program 3: mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:35:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:52 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) r1 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:52 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) pipe(&(0x7f0000000000)) [ 2659.661102][T21616] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2659.716139][T21622] device syz_tun entered promiscuous mode 12:35:52 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:52 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:53 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:53 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) pipe(&(0x7f0000000000)) [ 2659.957785][T21618] device syz_tun left promiscuous mode 12:35:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:53 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2660.231269][T21841] device syz_tun entered promiscuous mode [ 2660.257388][T21838] device syz_tun left promiscuous mode [ 2661.890134][ C1] net_ratelimit: 16 callbacks suppressed [ 2661.890144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2661.901544][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2662.370163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2662.375920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2662.770128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2662.775953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2663.010126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2663.015907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2663.570147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2663.575905][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:35:59 executing program 3: mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:35:59 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:59 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:59 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 12:35:59 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) [ 2665.976019][T21957] device syz_tun entered promiscuous mode [ 2666.015343][T21956] device syz_tun left promiscuous mode 12:35:59 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:59 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fcff", 0x58}], 0x1) 12:35:59 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:35:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 12:35:59 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:35:59 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f000075cf53), 0x0, &(0x7f0000b25ffc), 0x0) [ 2666.402674][T21978] device syz_tun entered promiscuous mode [ 2666.437740][T21977] device syz_tun left promiscuous mode [ 2666.930133][ C1] net_ratelimit: 14 callbacks suppressed [ 2666.935794][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2666.941540][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2667.170133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2667.175987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2667.730140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2667.735921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2668.130145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2668.136029][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2668.610142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2668.615987][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:36:05 executing program 3: mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 12:36:05 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:05 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 12:36:05 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) [ 2672.290140][ C1] net_ratelimit: 16 callbacks suppressed [ 2672.290162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2672.301630][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2672.314106][T22000] device syz_tun entered promiscuous mode [ 2672.325740][T21998] device syz_tun left promiscuous mode 12:36:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 12:36:05 executing program 5: socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:05 executing program 1: mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:05 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) 12:36:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) [ 2672.701583][T22019] device syz_tun entered promiscuous mode [ 2672.720572][T22017] device syz_tun left promiscuous mode 12:36:05 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) [ 2672.770099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2672.775904][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2673.170150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2673.175970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2673.410165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2673.416106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2673.970166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2673.975992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.330149][ C1] net_ratelimit: 14 callbacks suppressed [ 2677.335860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.341633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.570139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.575952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2678.130167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2678.135984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2678.530115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2678.535931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2679.010150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2679.016039][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:36:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 12:36:14 executing program 1: mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:14 executing program 5: socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:14 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 12:36:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) 12:36:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0), 0x0) [ 2681.654217][T22038] device syz_tun entered promiscuous mode [ 2681.677569][T22035] device syz_tun left promiscuous mode 12:36:14 executing program 4: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 12:36:14 executing program 1: mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:14 executing program 5: socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) 12:36:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @mcast1, 0x7}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(0xffffffffffffffff, 0x8008200) gettid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) mknod$loop(0x0, 0x0, 0x0) rmdir(0x0) unlinkat(r4, &(0x7f00000000c0)='./control/file0\x00', 0x0) close(r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) set_robust_list(&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0xc) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="6deb0d8bf20000000000bb1b6f90a2d2562537037f12f29ee10c0a99689acd940a8e7fafdb91b35712b7c09133fd73816117780fcce0b1f8f113e146e726fd2d4425d029e3958b6a00ddeecdfe53ba447ccd0029f9b4d8a82043f68e533b0e9eee48f693e3cdb6b930af84dd0ff777188a146332b4767234"], 0x1) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) lseek(r7, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x02\xdf\x01\x00', 0x40f}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 2682.047142][T22059] device syz_tun entered promiscuous mode [ 2682.059523][T22054] device syz_tun left promiscuous mode [ 2682.690146][ C1] net_ratelimit: 16 callbacks suppressed [ 2682.695865][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2682.701667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.170123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.176057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.570176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.576039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.810132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.816030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2684.370147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2684.375974][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2687.730172][ C1] net_ratelimit: 14 callbacks suppressed [ 2687.730181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2687.741833][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:21 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0), 0x0) 12:36:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) 12:36:21 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:21 executing program 4: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000140)='pagemap\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') [ 2687.970124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2687.975990][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0), 0x0) [ 2688.027920][T22178] device syz_tun entered promiscuous mode [ 2688.064171][T22175] device syz_tun left promiscuous mode 12:36:21 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:21 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:21 executing program 2: r0 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) 12:36:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 12:36:21 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2688.530118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2688.536046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2688.930135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2688.936050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.410167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2689.415971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2693.090132][ C1] net_ratelimit: 16 callbacks suppressed [ 2693.090148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2693.101644][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2693.570125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2693.576082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2693.970136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2693.975993][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:27 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12:36:27 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000180), 0x4) 12:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 12:36:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @rand_addr="bac884a9bc5589e69469a7efa92b0e2a"}}}, 0x108) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="390000001300090065000000000000007f008040040000004600010700000014190004000400000003f500"/57, 0x39}], 0x1) tkill(r1, 0x14) [ 2694.220115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2694.225949][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2694.267586][T22410] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 12:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 12:36:27 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:27 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a28093020600f2ffff7f01020b00000a0005003500280014000000190005407fffffff0022003c0656417d6339058fd2c556a342de1338d54400009b84136ef75afb83de44110016", 0x55}], 0x1}, 0x0) 12:36:27 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000440)) [ 2694.623279][T22535] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 12:36:27 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)}], 0x1) [ 2694.664375][T22535] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 2694.691449][T22535] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2694.770140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2694.776122][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2698.130144][ C1] net_ratelimit: 14 callbacks suppressed [ 2698.130154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2698.141720][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2698.370165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2698.375956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2698.930102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2698.935927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2699.330136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2699.335980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2699.810187][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2699.816008][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:36:33 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) 12:36:33 executing program 2: 12:36:33 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x10, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:33 executing program 4: 12:36:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)}], 0x1) 12:36:33 executing program 2: 12:36:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)}], 0x1) 12:36:33 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) 12:36:33 executing program 4: 12:36:34 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) 12:36:34 executing program 2: 12:36:34 executing program 5: r0 = socket$packet(0x11, 0x4000000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) 12:36:34 executing program 4: [ 2703.490160][ C1] net_ratelimit: 16 callbacks suppressed [ 2703.495839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2703.501583][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2703.970156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2703.976034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2704.370136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.375960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2704.610167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2704.615921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2705.170126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2705.176040][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x10, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:40 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) 12:36:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r3, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001000)={0x0, 0x40000000000006}) 12:36:40 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(0xffffffffffffffff, &(0x7f00000006c0)) fchown(0xffffffffffffffff, r5, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) r8 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c237073dafde77ef5a1a9e66dc63ae928a4a42e9d88b131eb6d46353331c4f2861a245d33b4e74462", 0x46, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bcef53d3a47853e7af5d0328209ad73224000000000000000000000000000000000000000000850576cab6419dd44c143a56fdce000000000000"], 0x0, 0x0, 0x8000, 0x0) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r9, r10+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r7, 0x0) 12:36:40 executing program 5: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r3 = request_key(&(0x7f0000000600)='ceph\x00', 0x0, &(0x7f00000005c0)='/dev/binder#\x00', 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000800), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02010000030006000000000002000000e000000900200000000000000000050000000000c9000008e00000019cee000000000000"], 0x40}}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xb) sendmmsg(r2, &(0x7f0000007fc0), 0x5654807, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0xe8ce}, 0xfffffffffffffd54) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000380)={0xe10b, 0x37d, 0xb2, 0x8, 0xb, 0x6f, 0x5, 0x1, 0x76ce02ea}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000040)=0xffffffff, 0x8000fffffffe) sendfile(r5, r6, 0x0, 0xa5cc554) 12:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) 12:36:40 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 12:36:40 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) clock_gettime(0xa, &(0x7f0000000140)) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, [], [{0x60e1, 0x10000, 0x0, 0x0, 0x0, 0x20}, {0x4, 0x80, 0x0, 0x5, 0x1ff, 0x4}], [[]]}) syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00') write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffca8, 0x0, 0x5}, 0x20) time(&(0x7f0000000480)) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ip6gre0\x00', r3}) 12:36:40 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(0xffffffffffffffff, &(0x7f00000006c0)) fchown(0xffffffffffffffff, r5, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) r8 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c237073dafde77ef5a1a9e66dc63ae928a4a42e9d88b131eb6d46353331c4f2861a245d33b4e74462", 0x46, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bcef53d3a47853e7af5d0328209ad73224000000000000000000000000000000000000000000850576cab6419dd44c143a56fdce000000000000"], 0x0, 0x0, 0x8000, 0x0) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r9, r10+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r7, 0x0) 12:36:40 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x80000000000001}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, &(0x7f00000001c0)=""/54) [ 2708.530113][ C1] net_ratelimit: 14 callbacks suppressed [ 2708.535801][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.541545][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.770121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.775899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2709.330176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2709.336050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2709.730169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2709.735997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2710.210141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2710.215915][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:36:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x10, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 12:36:46 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:36:46 executing program 4: clone(0x80003102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) r3 = gettid() socket$inet6(0xa, 0x0, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x0, 0x0) 12:36:46 executing program 2: clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x9) 12:36:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 12:36:46 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0x4) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x8000}, 0x28, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) write$binfmt_elf64(r3, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x4, 0x0, 0x2d36, 0x3, 0x3, 0x101, 0x8d, 0x40, 0x218, 0x9, 0x2, 0x38, 0x2, 0x4, 0x7}, [{0x0, 0x5, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7f}, {0x5, 0x5, 0x6ab, 0x2, 0x7, 0x3, 0x3}], "ae4eeca72642296cf0ce8c4ea8ed4ec049a87148b91c47e6c56877570001d69fb7998db5b8d7d0fbd8acea882457d65eb88e854bb064583c7ae352608307f9684cff321946609dbadbedb460a787d76a7acc3db709d2b5d029313659d9e72d7f3fcd714f58e00eb85ff921fe83a7b966abf84346f4e095843aa188b2f2ea8ae9b3", [[], [], [], [], [], []]}, 0x731) r4 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, &(0x7f00000000c0)) dup3(0xffffffffffffffff, r4, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x5910acf299f495b, 0x4) 12:36:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a6, 0x10}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x5, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 12:36:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044", 0x4d}], 0x1) 12:36:47 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(0x0, 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2713.890165][ C1] net_ratelimit: 16 callbacks suppressed [ 2713.890180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2713.901683][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.370208][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2714.376136][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.770120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2714.775887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2715.010121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2715.015980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2715.570138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2715.575958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2718.930147][ C1] net_ratelimit: 14 callbacks suppressed [ 2718.930157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2718.941625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2719.180150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2719.185953][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:52 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfedd, &(0x7f00000000c0), 0x4c}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 12:36:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044", 0x4d}], 0x1) 12:36:52 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(0x0, 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:36:52 executing program 4: getpgrp(0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0xfffffffffffffdc3, 0x0) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, &(0x7f00000016c0)={0x5, 0x0, {0x57, 0x3ff, 0x80, {0xffffffff}, {0x7}, @const={0x0, {0x0, 0x0, 0xfffffffffffffff9, 0x2}}}, {0x53, 0xfffffffffffffffe, 0x58e, {0xabc, 0x2}, {0x6, 0x7fffffff}, @cond=[{0x0, 0x0, 0x0, 0x1d61, 0x1}, {0x3, 0x5, 0x0, 0x0, 0x100000001, 0xffff}]}}) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001440)='security.capability\x00', &(0x7f0000001480)=@v1={0x1000000, [{0x80}]}, 0xc, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000940)={0x88100a595e53f860, 0x70, 0x40, 0x0, 0xb245, 0x0, 0x0, 0xdf, 0x20088, 0x0, 0x4e, 0x0, 0x9, 0x8, 0xfffffffffffffffa, 0x9c4, 0x0, 0x7, 0x9, 0xea53, 0x0, 0x0, 0x3, 0x3, 0x1aa64f8b, 0x3, 0x7, 0x8001, 0x800, 0xfffffffffffffffe, 0x1, 0x0, 0x1, 0x8, 0x9, 0x7fff, 0xa6, 0x0, 0x0, 0x151a, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x88, 0x6, 0x8, 0x0, 0x7, 0x0, 0x1}, r3, 0x1, 0xffffffffffffffff, 0x2) getitimer(0x0, &(0x7f0000000040)) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0xffffffffffffffc3) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) getegid() recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001880)='TIPC\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0xfffffffffffffffe) [ 2719.730177][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2719.735977][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044", 0x4d}], 0x1) 12:36:53 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(0x0, 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:53 executing program 2: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, r1+30000000}}, &(0x7f0000000100)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 12:36:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@remote, 0x7f, r2}) 12:36:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00", 0x53}], 0x1) [ 2720.130104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2720.135901][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:53 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2720.610142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2720.615901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2724.300145][ C1] net_ratelimit: 16 callbacks suppressed [ 2724.300155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2724.311652][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2724.770124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2724.775943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2725.170134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2725.176024][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2725.410145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2725.415944][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:36:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00", 0x53}], 0x1) 12:36:59 executing program 4: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) socket(0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setown(r0, 0x8, r1) pipe2(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x20) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 12:36:59 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xfcfb, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000018007f1dfd0000a2a4a280930a06000300000009910000000e0008000a0000000000dc1338d5782dbfef3fb6f6ac61f28f36f39584136ef75afb83de440000000000000000705810ea5a90662473e2baff", 0x55}], 0x1}, 0x0) 12:36:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e01003f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 12:36:59 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2725.970121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2725.975929][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00", 0x53}], 0x1) [ 2726.046751][T24149] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.2'. 12:36:59 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:36:59 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000240)={{0x1}}) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffe9b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)) 12:36:59 executing program 4: 12:36:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e01003f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 12:36:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004", 0x56}], 0x1) [ 2729.330148][ C1] net_ratelimit: 14 callbacks suppressed [ 2729.330165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.341796][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.570135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.575968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2730.130154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2730.135963][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2730.530132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2730.535948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2731.010134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2731.015901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2734.690136][ C1] net_ratelimit: 16 callbacks suppressed [ 2734.695944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2734.701692][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:08 executing program 4: 12:37:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:08 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004", 0x56}], 0x1) 12:37:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e01003f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 12:37:08 executing program 2: [ 2735.180118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.185923][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:08 executing program 4: 12:37:08 executing program 2: 12:37:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004", 0x56}], 0x1) 12:37:08 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 12:37:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e01003f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) [ 2735.570102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.575959][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fc", 0x57}], 0x1) [ 2735.810128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2735.815955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2736.370127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2736.375907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.740150][ C1] net_ratelimit: 14 callbacks suppressed [ 2739.740166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.751595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.970156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.975936][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2740.540114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2740.545955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2740.940148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2740.945940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2741.410115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2741.415906][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:14 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 12:37:14 executing program 5: socketpair(0x1, 0x80803, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 12:37:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fc", 0x57}], 0x1) 12:37:14 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)) 12:37:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f000000b040)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000780)="a3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000029c0)="1d", 0x20000781}], 0x1}}], 0x2, 0x600d054) 12:37:14 executing program 5: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001080)) 12:37:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="580000001400190200000080040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001040010044080800418e00000004fc", 0x57}], 0x1) 12:37:14 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:15 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0xa26, 0x5, 0x101, 0x4, 0x2}, 0x14) r6 = accept(0xffffffffffffffff, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x80) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @local, @multicast2}, &(0x7f0000000880)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000008c0)={@local, 0x0}, &(0x7f0000000900)=0x14) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f0000000cc0)={0x2e4, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0xf0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x90, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x138, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x380}}}]}}]}, 0x2e4}}, 0x4000000) r15 = socket$packet(0x11, 0x3, 0x300) r16 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r15, &(0x7f0000000040)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @remote, r17}, 0xc) r18 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r18, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) r19 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r19, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r18, &(0x7f0000000040)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @remote, r20}, 0xc) r21 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r21, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) r22 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r22, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r21, &(0x7f0000000040)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @remote, r23}, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@can={0x1d, 0x0}, &(0x7f0000000340)=0x80) r25 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r25, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) r26 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r26, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r25, &(0x7f0000000040)={0x11, 0x0, r27, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @remote, r27}, 0xc) r28 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r28, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r29 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r29, 0x2007fff) sendfile(r28, r29, 0x0, 0x8482) getsockopt$inet6_IPV6_IPSEC_POLICY(r28, 0x29, 0x22, &(0x7f0000000500)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) r31 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r31, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) r32 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r32, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r31, &(0x7f0000000040)={0x11, 0x0, r33, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @remote, r33}, 0xc) r34 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r34, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r35 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r35, 0x2007fff) sendfile(r34, r35, 0x0, 0x8482) bind$bt_rfcomm(r35, &(0x7f0000000100)={0x1f, {0x0, 0x9, 0x5, 0x0, 0x6, 0x7}, 0xa7}, 0xa) accept4$packet(r35, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14, 0x800) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x2e0, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r17}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r23}, {0x1b0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r24}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r27}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r33}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8, 0x1, r36}, {0x80, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xf40}}, {0x8}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c40) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) pipe2(0x0, 0x84000) clone(0xd1102103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0x401, &(0x7f00000004c0)) epoll_create1(0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 12:37:15 executing program 0: socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clone(0x7ec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='U'], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:37:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) r3 = socket(0xa968114f94c1b4d8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) 12:37:15 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) pipe(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="08010007a30000007d000000ffffff7f3e0100000500000000000000000000008394efd2b7dde50bbc9c50fdba8d3e8638db0d5dba23ffa019ae7bfe708144de9ff74e3ebef59c629bfc83e6f9ee66fa000000000000000000000100000000f62df1cab2f943d25567178df32226170000f7ccfa6851b9da767cfb65804938345300"/148], 0x94) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x5a92) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) 12:37:15 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2745.090165][ C1] net_ratelimit: 16 callbacks suppressed [ 2745.095976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2745.101869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2745.570142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2745.575924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2745.970102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2745.975878][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2746.210100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2746.215917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2746.770133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2746.775941][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) 12:37:21 executing program 0: memfd_create(0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[], 0x0) read(0xffffffffffffffff, 0x0, 0x0) inotify_init() clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() wait4(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) 12:37:21 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 12:37:21 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:21 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) pipe(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="08010007a30000007d000000ffffff7f3e0100000500000000000000000000008394efd2b7dde50bbc9c50fdba8d3e8638db0d5dba23ffa019ae7bfe708144de9ff74e3ebef59c629bfc83e6f9ee66fa000000000000000000000100000000f62df1cab2f943d25567178df32226170000f7ccfa6851b9da767cfb65804938345300"/148], 0x94) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x5a92) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) 12:37:21 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 2748.079541][T25204] IPVS: ftp: loaded support on port[0] = 21 12:37:21 executing program 5: 12:37:21 executing program 2: 12:37:21 executing program 0: 12:37:21 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:21 executing program 5: [ 2750.130195][ C1] net_ratelimit: 14 callbacks suppressed [ 2750.130226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2750.141811][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2750.370156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2750.375913][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2750.930126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2750.935891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2751.330144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2751.335995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2751.810119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2751.815905][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:27 executing program 0: 12:37:27 executing program 2: 12:37:27 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 12:37:27 executing program 5: 12:37:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:27 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) pipe(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="08010007a30000007d000000ffffff7f3e0100000500000000000000000000008394efd2b7dde50bbc9c50fdba8d3e8638db0d5dba23ffa019ae7bfe708144de9ff74e3ebef59c629bfc83e6f9ee66fa000000000000000000000100000000f62df1cab2f943d25567178df32226170000f7ccfa6851b9da767cfb65804938345300"/148], 0x94) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x5a92) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) 12:37:27 executing program 0: 12:37:27 executing program 5: 12:37:27 executing program 2: 12:37:27 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, 0x0, 0x0, 0x2000, 0x0) 12:37:27 executing program 5: 12:37:27 executing program 2: 12:37:27 executing program 0: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) ptrace(0x4208, r0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) 12:37:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x191800, 0x105) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000300)="959e81e6d93741067f2e904a88227206c3ff", 0x12) fchdir(r0) creat(0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) pipe(0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) write$FUSE_WRITE(r5, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 12:37:28 executing program 2: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/bus\x00', 0x40241, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) 12:37:28 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, 0x0, 0x0, 0x2000, 0x0) [ 2755.490117][ C1] net_ratelimit: 16 callbacks suppressed [ 2755.490132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2755.501594][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2755.970159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2755.975988][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2756.370153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2756.375993][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2756.610158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2756.615935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2757.170145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2757.176029][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:33 executing program 0: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xffffffff, 0x4) 12:37:33 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) pipe(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="08010007a30000007d000000ffffff7f3e0100000500000000000000000000008394efd2b7dde50bbc9c50fdba8d3e8638db0d5dba23ffa019ae7bfe708144de9ff74e3ebef59c629bfc83e6f9ee66fa000000000000000000000100000000f62df1cab2f943d25567178df32226170000f7ccfa6851b9da767cfb65804938345300"/148], 0x94) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x5a92) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) 12:37:33 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa008137ffff075c000000000000c2d51d26d57c000000000000e0d26d34ac63000b0cf3b564ed99e2d3"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 12:37:33 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, 0x0, 0x0, 0x2000, 0x0) [ 2760.530121][ C1] net_ratelimit: 14 callbacks suppressed [ 2760.535918][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2760.541884][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:33 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000140)) [ 2760.770135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2760.775941][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:34 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 12:37:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 12:37:34 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x580, 0x66) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x80, 0x2}}, 0x14) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x67, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000e00)={'syz1\x00', {0x2, 0x400, 0x1, 0x7d}, 0x11, [0x6, 0x9, 0xffffffffffffffe0, 0x20, 0x7, 0x207dda32, 0x1, 0x1, 0x2, 0x10001, 0xa, 0x3ff, 0x4, 0x3, 0x7, 0x7, 0x0, 0x0, 0x40, 0x66a5, 0x3, 0xfffffffffffffffa, 0x9, 0x20080, 0x6, 0x200000000000000, 0x8, 0x3, 0x3, 0xae, 0x28b3, 0x4, 0x101, 0x0, 0x8, 0x8, 0x200, 0xfb22, 0x5, 0x1c0, 0x1f, 0x6, 0x0, 0xffffffffffffffe0, 0x4, 0x1, 0x4, 0x8, 0xb2e0, 0x6, 0x3, 0xfc, 0x0, 0x7f, 0x5, 0xffffffffffff8664, 0x7ff, 0x6, 0xffffffff, 0x9, 0x5, 0x100000000, 0x236e, 0x4], [0x0, 0x1c8, 0x75f, 0x4, 0x80000000, 0x6, 0x0, 0x5, 0x2, 0x6, 0x5, 0xffffffffffff88e9, 0x1, 0xff, 0x4, 0x20, 0x2, 0x4, 0x80, 0x3, 0x6, 0x7, 0xd52, 0xfffffffffffffffa, 0x1cc6, 0x1, 0xfff00000000, 0x2, 0x1a8, 0x81, 0x6, 0xffffffffffffffff, 0x1e5b4821, 0x4, 0x5, 0x4c8, 0xb6, 0x8001, 0x4, 0x80, 0x4, 0x0, 0x3ff, 0x9d6, 0x80000001, 0x7f, 0x2, 0x2, 0xfffffffffffffffd, 0x8, 0x1, 0xffffffff, 0x7f, 0x7f, 0x4a, 0x6, 0x0, 0x2, 0x40, 0x0, 0x2, 0xffff, 0x3, 0xff], [0x800, 0x2, 0xcf6, 0x3, 0xfffffffffffffffd, 0x0, 0x6, 0x401, 0x101, 0x800, 0x100000000, 0x80000001, 0x3d23fd0, 0xb1, 0x101, 0x20000000400000, 0x1, 0x3, 0x5, 0x0, 0x1393, 0x0, 0x1000, 0x1, 0x6, 0x40, 0x7, 0x417, 0x800, 0x3, 0x3ff, 0x5, 0xfffffffffffff2e9, 0x5, 0xba, 0x6, 0x0, 0x6, 0x3, 0xf383, 0x9e1, 0x0, 0x5, 0x7, 0x8, 0x7, 0x8, 0x8, 0x100000001, 0xb1, 0x2, 0x938f, 0x0, 0x3, 0x400, 0xf828, 0x7ff, 0xbf, 0x81, 0x80000000, 0x20, 0x6, 0x400, 0x3f], [0x0, 0x7fffffff, 0x39, 0x3ff, 0x3000000000000, 0x1000, 0x6f, 0x5, 0x2, 0x5, 0x100000001, 0x4, 0xc231, 0x3, 0x0, 0x7100000000, 0x0, 0x4, 0x1, 0x9, 0x8, 0x4, 0x2, 0x0, 0x1, 0x0, 0x1f, 0x5, 0xcaaf, 0x9, 0x400, 0x4, 0x100000001, 0x8, 0x0, 0x5, 0x5, 0xffff, 0x8000, 0xfffffffffffff7a1, 0x9, 0x7, 0x20, 0xffe00000000000, 0x0, 0x37f5e19c, 0x0, 0x0, 0x2, 0x0, 0x9, 0x7, 0x0, 0x7, 0x2, 0x6, 0x4, 0x4, 0x1, 0x100000001, 0x0, 0x100000001, 0x1000, 0x1f]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x80}) 12:37:34 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2761.330141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2761.335954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2761.730120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2761.735939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2762.210112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2762.215878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2765.890178][ C1] net_ratelimit: 16 callbacks suppressed [ 2765.890187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2765.901608][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2766.370130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2766.376074][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2766.770174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2766.775937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2767.010182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2767.015984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2767.570126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2767.575936][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:40 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 12:37:40 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:40 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000100), 0x0) 12:37:40 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x8}], 0x1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xe5e, @loopback, 0x3}, 0x1c) setsockopt$sock_timeval(r6, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) listen(r6, 0x80) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) fstat(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r5, r8) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) r11 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c237073dafde77ef5a1a9e66dc63ae928a4a42e9d88b131eb6d46353331c4f2861a245d33b4e74462a0d534390bbaea2e57284334a55affc1f64455564ede46c25d2bd9c9afa4b715ce7bed394231b36dde3c", 0x70, r11) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bcef53d3a47853e7af5d03288100000024000000000000000000000000000000000000000000850576cab6419dd44c143a56fdce00000000000000"], 0x0, 0x0, 0x8000, 0x0) write(r10, &(0x7f00000001c0), 0xfffffef3) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r12, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r13, r14+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:37:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 12:37:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x400023f, 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) 12:37:41 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x1) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 12:37:41 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x7ffffffffffff010}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 12:37:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r1 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) r2 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0xa, 0x45, 0x0, @mcast1, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f00000003c0)="fc75", 0x2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0xa, 0x45, 0x0, @mcast1, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f00000003c0)="fc75", 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffffffffffff65) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000000400)=0xe8) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}], 0x1, &(0x7f0000000240), 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:37:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 2770.930116][ C1] net_ratelimit: 14 callbacks suppressed [ 2770.930125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.941704][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2771.170149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2771.176019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2771.730130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2771.735933][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2772.130133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2772.135909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2772.610122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2772.615910][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:47 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) 12:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) socket$key(0xf, 0x3, 0x2) 12:37:47 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000300)=0x782b, 0x4) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r7, 0x0, 0x1691) sendfile(r7, r6, &(0x7f0000000480), 0x35c) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000100)={0x69a, {{0x2, 0x4e21, @local}}}, 0x84) write$FUSE_INIT(r6, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, 0x4, {0x7, 0x1f, 0x7, 0x100, 0x400, 0x400, 0xfffff000, 0x20}}, 0x50) sendfile(r3, r5, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e74703cad1efd94cb111bdd474a999c4e405afae64fc43ffdef72ec08f53bec"], 0x78) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(0x0) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r5, &(0x7f0000000040), 0x8000fffffffe) 12:37:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'eql\x00', 0x5}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0xffffffffffffffdd) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr="53741cec2f4a3fec9f9fa9ce2df8876b", 0x0, 0x4, 0xff, 0x11, 0x9, 0x2}, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0xfff}, 0x2) pipe(&(0x7f0000000440)) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x8101}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:37:47 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000002280)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002cc0)='ns/pid\x00') 12:37:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x11, 0x3, 0xdd86) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = dup(r1) dup2(r3, r0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab80ff000000000000369310000100fe80ffff0000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c014fbdc899c121b6b900036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74402cc56ce1f0f156272f5b00000005defd", 0x89) 12:37:47 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)={0x2, 0x1, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 12:37:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100080a0c00410400000000fcff", 0x58}], 0x1) [ 2776.290167][ C1] net_ratelimit: 16 callbacks suppressed [ 2776.290182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2776.301664][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2776.770124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2776.775914][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.170131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.176036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.410144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.415982][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.980175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.986022][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:37:52 executing program 1: creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) poll(&(0x7f00000004c0)=[{r1}], 0x1, 0xa4) r2 = syz_open_pts(r1, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r2, r1, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = gettid() tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') write$input_event(r7, &(0x7f00000001c0)={{0x0, 0x7530}, 0x14, 0x6, 0x5}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="e28e5774e196350cd656e4a62e2148fabcb3eaa78c702193d3cc83f12db4d2ff3b9f9db5547dd09e1c42adc969639bbce3c10afe2dea5100"/68, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX], @ANYRES16=r6, @ANYRESHEX=r0, @ANYRES16=r8], @ANYRESDEC=r9], &(0x7f00000000c0)=""/28, 0x1c) r10 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x100, @dev, 0x8004}, 0x1c) 12:37:52 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:37:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) sendfile(r0, r1, 0x0, 0x2007ff) 12:37:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fcntl$setflags(r2, 0x2, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0xffffffff80000001) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) gettid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000940)) 12:37:52 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:37:52 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:37:52 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:37:52 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000000180), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f000000d000)={0x77359400}, &(0x7f0000000280), 0x0) 12:37:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000003f, 0x0) 12:37:52 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffff", 0xc9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @loopback}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x20000007}, 0xfffffd02) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 12:37:52 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000004}) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x0) [ 2781.330144][ C1] net_ratelimit: 14 callbacks suppressed [ 2781.335831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.341588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.570117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.575873][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2782.130142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2782.135961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2782.530165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2782.535958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2783.010156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2783.015975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2786.690159][ C1] net_ratelimit: 16 callbacks suppressed [ 2786.690176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2786.701625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2787.180136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.185950][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:38:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x81, 0x2, 0xfff, 0x9}, 'syz1\x00', 0x1e}) 12:38:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:38:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r0, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) memfd_create(0x0, 0x0) fdatasync(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x3d6, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) sendto(r0, &(0x7f0000000040)='J', 0xffffffffffffff7e, 0x8841, 0x0, 0xfffffffffffffebd) shutdown(r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x80040000101, 0x0, 0x2f49b2819fbc7c26) 12:38:00 executing program 2: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x7fe, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x4000004, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x2bf9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e1e}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 12:38:00 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:00 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2787.580131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.585995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2787.727269][T28088] input: syz1 as /devices/virtual/input/input504 12:38:00 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) [ 2787.797661][T28088] input: syz1 as /devices/virtual/input/input505 [ 2787.810094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.815925][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:01 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000000080)) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x80201) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x9}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x10000, 0x7fff, 0x6, 0x6}, {0x100000000, 0x6, 0xe90b, 0x47}]}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x2, 0x401, 0xfffffffffffffffd}, 0x14) chroot(&(0x7f0000000000)='./file0\x00') listen(r2, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000780)=""/86, &(0x7f0000000800)=0x56) syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x440800) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x6) sendto$inet6(r3, 0x0, 0x0, 0x20004004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x0) setgid(0x0) setresgid(0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00,\xc6M\xec\xd8`\x0f\x9b\xdaj\xac\x8a?>\x11\x98\xd0\xe4\x90\xf8\xe1\x00\xd7Z\xce\xc8\xc5\xc6\x19\x87\x1a\x01\xd2\xce\x11\x04\xfa\x95dH@c\xdd\x1do6Pj/\x9c\x13\xa7\x9e\xb58u+\x06\x81\xd2/u\xc7ysl\t\x97\xf8o}\x7f\x8e\x99=\xd4\xd6\x03\xd9\xe3\x89\xe9\x14dE-\xed\xe2Z\xd0\xe3Qp\xe4=@\xfc\xa0\xc5m\xa0)\xb8\xba\x05{\xe2}Eq\xf3\x05\xdc\xa9\xae\xc4m\x11\r}u\vH\x14\x96\xd0\xb2\xef\x02}\xc3\xacq\xdb\x89`\xc8\xea\x06\x9bj(\xbe\xa0\xb9\xfa\x98\xa1zl\x83\xa9\xcd\v0!i(\xd8\xb9\xcc\x91\xe9\x82yx\x00wn\x9f\xa8\xf2B\xe2\xa7\xec\xc33\x99\xb7\x19z\xddW\xe2,Co\xef') read(r6, &(0x7f0000000040)=""/56, 0x38) readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000b00)=""/186, 0xba}], 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="880040007d02000000610000009304000010020000000300000000000000000020008000000002000000ff0100000000000009002e2974736572656d00800000230013006b657972696e672d2a4a70726f632c5e6c6f23000012002f6465762f696e7075742f6576656e742300", @ANYRES32, @ANYRES32, @ANYRES32=r7], 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000680)=""/84) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:38:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 2787.974413][T28088] input: syz1 as /devices/virtual/input/input507 12:38:01 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) [ 2788.175663][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:38:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x81, 0x2, 0xfff, 0x9}, 'syz1\x00', 0x1e}) 12:38:01 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x81, 0x2, 0xfff, 0x9}, 'syz1\x00', 0x1e}) [ 2788.370149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2788.437141][T28613] input: syz1 as /devices/virtual/input/input509 [ 2788.541399][T28613] input: syz1 as /devices/virtual/input/input510 [ 2788.607348][T28619] input: syz1 as /devices/virtual/input/input511 [ 2788.724048][T28619] input: syz1 as /devices/virtual/input/input513 [ 2791.730136][ C1] net_ratelimit: 15 callbacks suppressed [ 2791.730145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.741655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.970098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.975965][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2792.530135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2792.535903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2792.930106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2792.935897][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2793.410105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2793.415946][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:38:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast1, @loopback}, 0xc) dup2(r0, 0xffffffffffffffff) dup3(r0, r2, 0x0) 12:38:07 executing program 4: r0 = memfd_create(0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:07 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x8c, 0x0, 0x0, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) 12:38:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:38:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x81, 0x2, 0xfff, 0x9}, 'syz1\x00', 0x1e}) 12:38:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2794.059193][T28741] input: syz1 as /devices/virtual/input/input514 12:38:07 executing program 4: r0 = memfd_create(0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:07 executing program 2: gettid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000000000008040, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) gettid() timer_create(0x0, 0x0, 0x0) truncate(0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 12:38:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x81, 0x2, 0xfff, 0x9}, 'syz1\x00', 0x1e}) 12:38:07 executing program 4: r0 = memfd_create(0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) [ 2794.522664][T28963] input: syz1 as /devices/virtual/input/input515 12:38:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:07 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) 12:38:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 2795.020587][T29253] input: syz1 as /devices/virtual/input/input516 12:38:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) [ 2795.070388][T29253] input: syz1 as /devices/virtual/input/input517 [ 2797.090140][ C1] net_ratelimit: 16 callbacks suppressed [ 2797.090156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2797.101625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2797.570165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2797.576011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2797.970117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2797.975979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2798.210130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2798.215909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2798.770329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2798.776107][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:38:13 executing program 4: memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x1132}) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 12:38:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 12:38:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) 12:38:13 executing program 4: memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2800.354643][T29304] input: syz1 as /devices/virtual/input/input518 12:38:13 executing program 4: memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x4, 0x0) 12:38:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 12:38:13 executing program 2: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) writev(r2, &(0x7f000000b000)=[{&(0x7f0000002080)="2c267e242481c30c666d158d944f0d89d0b24c02deea35d5f9772f8dae1cd41446cde1fbd5331eb8ac66abe4cabe3d1e42910a6a97054224ebde680a2c55c3eb196263fff503b9a83e01ec52bb3c81701958db38fabf47e496cf0a9432989b7476733757dc1062021181e6ac4f656a7b7be4ace9d1d96fb9cf322fa1916986285493f75f8787212d0ccbd4c3fa28fda762b68fbf35cc9e334d419c9d9fab1b0a5fd501e429ef862e908502d31b442c89b8e728b222c35ef07ca658b0c27225da062e195f29b1b2ba25d4099813dcd2f613c79466432b6c36fa3b2e7822aa51458c4d5cea7abdba8e2f129daff37f27487e477a5c5ba0f214c0ba7845e146c868950000a923e35014b6ddb9b85e35ad7590abaf67c006c4b1feb963d9eab378801359edbcdd410f113b39b11b5f7a420a080df102df54c169372e0e045640619942d91cf198369418515e484ee19965db6d9ff1b76561d8b60216afb1b236d5b56cbdfe8a3166c2cb934bd953d7d4989e899f871d0892bc9cebe86962d59c65881ebf3edcfb52180ff5795d2b5abefefbc7d122a20dc5b32465da34213a0c623d7a9b2f3339fa63ddc561a45ac96a68c4f21423a05ea2235b6df0ed19019d07d9b0e9cda2f58709b494a46ebe64722863d67a846b829f3e3ce4c9f0ce5a37d93fb1d07a420bde1c678ab8ad546c5a1f295baf92e543c4da2dabfb9b15b89e2875c06d7dfcb2994a68fefbdfa27991c1222403482c5b09928214d1d4369ab817d15838538566a0176cc12e72bdac913ea4ad953e4ef72e338c9abb074e45389d831d29eb0c2147ccf7cd404c7c71e77fa9e44a1dcd4bb893211bfd9a2c25214e9202ebc41539286e3f2417a34400bfbfa668b8c0dc75673bbb42c3d88870ace8de6b6b9b5d51264a690396cc342012bba7192829d5e13d7603ed5e8489811daa185e2ad017a5c66df226d42af281defaadcff6d6f264dedf38296b00b0c1a534dc539c3c7f6b1882be5cd29f7c6541d9efc446ff28ea9a7cf7ced90bf2a3cd4b08b98debf758df3bf64090af0fa91269a827554d0088657fff5d93bcd5c9f26ab2aeceb659e427e05ce81fa0bf118ac60e56aca2129e6bc8513e6372de0ec4b7561d69e7126daf2a98ed9f96b0d3d611a8f0a69468fed7caf20980b80cb2bd629e376aface6d811ccb978546ac135b8cb146862ec33a4f14cec8f340b09bcc49fed4b5f861d397de3eb153841bfeda6cf888f18df77940d2ff55759d1e7c7976f5f4de3803b3b6f1eb5d6e7bb1138f8198119a237482acfe813619c20b7656c76236ad6622e6f917b74fe13679677d7008d603de253372e93994e10590b44c71468723cdaa8a0368c04773926d5d901d46b671d9e5f43641fd39cef19474375343f0a0be26e5614d1970e7d1a6c832253cdbc7f859955ad62674c9a97287d7cb4d811fb7694d579322fdf25ff824605aa0c8cf5460bed8ca2a8b1527c9c51f6b7c1510143b024142d6a9e5111c4aa98147ecc41febad60fb132faa75cc3b61ca564412ef8827327a85efc37ce6df695d394c2399f6e24189499438e0f77b598891e6ffbf855d741817f44f4a431ee11ad30a50b178a5ef179137ba24336b9b9a6a459d1f361eed683da46ccc51081331fc422471a136d31ad7698fc27d0a5cc2e48d0c0af32c91489e03647a9e9771c4fc62d3877079fb037b641a5fe7bda287ab1a049ee5dadaa2f971566dcb708e351e0f937993696fd31a1d999addd76127e97ad684948d0d5e6bd21b0b68986295d7cc71be683e448b1e3016ae3e98ee83512c398376d52bb0ab50674a886d34a7c123748396498581ff22aeb3052d01b3f6dc473b6ce27d359dc9077a68a2abe4b17c3dfbaeb7f90f1be19c89de6753620f33e31cfe27a3a18b333e548836e38920a3459b5407268f0d41c58c6f5091172cf0a508c1d73f2aa9e953496bbe8ab03533f89e2b4dafb37b89d25e0efb75ff84bb1cbd60a33dddb627e88efb44138b40ffad9bf70111f7e8f6b01e89b3a74b9cf71191f2bd026ba01e16a21d0abca2491351475a08fb593cdfb40047e896457af4c3a61f4fb7ad570080193954b62a7839127ddfb8d93018978fd3e642658213571246308454cc4195cead295f6f72c10def5930930e44782edd916230fa99423def58b780f6936d55aa952baea0c58630526df65f0ebf91b0e01c97f9b3bbca8fceff87ffc945c972b51b11954a476967b52c2fa3247a6e6bba9cef9ff5efd4523a64e11005128003b34251108d8f3dd62c3db158fec915546db1db5f02300b3f5baee8ac9a498d00a1bdb1cfab31dffc4506c799a269b6be101c0e8a2907c5464733a06d8f855c619befa9b77cbceb48da086ac09e510c609cb5c95d0f69d053ef35c32a7b96e6ab7297fdf211e198bf90087433474bffd8fe0d1e77934d8848d2d6a5ce21124e8c2af71e28026950caa63c4b0f6648e41225b384d5ee21701659489ccc2017d48463e0dcf97361c538c8b47d049f2b36d0584cb786215400ce18e285c1dbad47dda87c28d3f5f7fb15c560d1b28472f787b4915300364ce08acf3747d0020731e81dac8c252ed2cb5e096268f6d3e363620d92f272bd34c240eb4aba3d01904d897723345234ccbc4610a3a2259b244397b1f1db4094dfbc765aa212dd09a9197c9ff51e0f07c3547fc3f2f86e2d996b3bb4a6ebb282a10e2738b1e945ce3f33bd3979bfba6edb830341f6eb997cab67f9eb7a57fc1a8bf0ce64d9300e622a144bb424ecace72f0d16ef443de9ba89d8ac38e2e88f0a3ed23ec851dfb45df034532169cca827c88081e7fd2354819d9c20ea39f2932787246d8806e089ec1c70cca020f898602f211eb2504aadc3090d85a3ec9483451058d6caba71806f3f494d73755774296a67511572eb801b188dfbddf065be196febbfbce5af895fdc7278a1ede609f9af86f208aeef20001a9fc0bc04eef1a84229dda539e6bcc31479321036f162e57f41b1991cddc88179be2b1ada532eeb770aab9ec82399b80879ed2cdda07b061b0f0ee35002209d9b5afa9836efd2cad153227f4af2c1b4f60c21573c35faec09c45467540dbf3cabee5a2918b4a9432ebe672306f1acfdae1a3c3d8be48c58621c0b16312ed7777f81fc9084eeddf26e68c5d7f0d83347897a69e9b293c1e93b17448fea811d13af456f30f4f5b0ed0ec8b5876ab2dadeff381093f16f5013cfff76f2c77fdaf87d0d82697e070131831054757ac544aab5801ca1dfa665ded0e9de3eedb8cb6f17485a92eceac1b2b33927bb410c9369a4b7f3fc186828693a92fc07f415d244ee972b25c2d42b69c5e03ba57a1037d59f02a098fe62536e7af192233d86e8fae5d17fc7bd13b6e54d59941edeb975c85667a743ad4825e68cd00c707ba80bb0902d7f7fabd7c8e6a6df462b210528ce8378a6255c1da496305c84e741c5a5175919b44938f969bc2cf50e0ea4569e0dc523118e7b4d8165893f610a49a215f0945f0c177d1fc348cfbdbe1ef33bd8f1f41f761b9f8bb23172315bbd451d729f823d20559b3535d01173c92dd4b8c151d1e9be2eeb62d133f050bea021e75e41d8eab2678f0bfb40e134d8a60029a9ee4332316e1665360f477255915f344e1c56ed620431e9e4371c983abef24ba800c239b2273b14b342339a374a0fc3aa30898ef0e69040ef4dd6c298dc90e03242118eb824bd23044c87783085533e19445b43ef341c4372ac4545ac03a3adc532475947d63ce67e1e3763cc7f9ff9d103c434570c02c7b811a648b5bbfadb847d29311b6589a4864fd8af8e354b221fc78e407c95160460cd74d5966ba405da1f496950a6ac1e79ab6dc511ecd726d05d38e0fd65bd66c58c11280785a302aa00ddc03cad93833bd357b30ec13e91d632ec8d5565ed6a5d0554f17b4d7efa147fc0d9035d8a96213e9465da1d3b94f56d3f2b12d7e394a5fff25873c591cee50c5c14273d4b1c645d5ded4a0ad5d8a1296f40c2b65cf457a5780c4a4569927bd896c0d71498f2d31f4f61282540105f5845326aa61ceb01c10be922a2fdeaa1a9689922e255e053be4c4cb45f5c6bd8af4f93f8362bbf54875ddbedab4b97e8cec478e4ceda8121439523839abb6e1cdc7ba2eb34c1fe9931585e1e0d8c326276bab83170752a30f2a3a250aad1cc1f72155457dd3ab40e4c2f1454084683f8bfc92fd87af76a73dbbf06f8d4f18dffbff0c8310eb96303c60401e4efa54def27c4e023aaaee24d525d1d98822eaeb33bbc5d40e8845b6ae1b29ede30c6675f5aab93b2b28391008e62d9d9bd1224116d9874233c57f3524e34a2737f74daa1bb9051ba8e2564fa2f3e5462bd67a7be796c682ba55d0f64331b1c0c3e45aec99548e65b61420f25cad6d3ca9063db31fe16b7157249cdc2e592188efddd0161314104615509ee1ff212c98a448a5b2b7a931b01b1ed502135f324f3b58906591ce181010e9c62ce9cfab26d4ddf9ab43fbc277d15b8bfb93edbcfe276e5646fde162dc926487440cdcc90a92ed03662ec04ab9ec1b1647707b43c7fe18a030e3001cd7915013e0196c4609aa8475fc85302b963f4be6a16b8206b099c81b6bf4619389f6df538813a2ad08183e97750b35b1ced267166f4f39b13d9925db22bdc6dd7c3ca8d0aab439040d42952e62eee9a2728c9b7e45f7463f8447ec2ec435bd7e91bd05ad09ec013468f4ba54437da9b8db677f4eaf10c5746da05bf12359b3aa915be2999e2bce629dd4ad01ce0b6229e4b49cca0157abb5221488a785af2d71a149f096b0c564a6d36ca92d36ea15c54dc44eaafed114a858f1c126f68888eba594dcd52ae7f233e2ec88d2a2fc95da3385e02f30746a844f8d6e05b724aff933c15088cde099f04f4228745bdb51180d4e6114a364cb6ef32a71872dfcb86278df4a20423c354699cdb4c63b35dc4fa04a5d456c65e72b20be53f302e8ccbe6873e76e0adabdca405c50a9d933be9046c616c8e6ada9949de0db64bed0b6c8c8d6250a2589896ebbdaa5e7d254130c4b5fd7e9b57da57e5491aad4aa5f81d73a220332abf1e7a5ccc360bc1ac342408f8d5335e97a3c2f8353498946bfbbabf386459423c4e2af0c908b4724df1f97b92991a937a955ac45aa3b130768c49d550cfdacd2e7753950f336d9ce6f367fb566c935bb940f9beedaaa4348efff216e201a9e5de2c65ac43f6c3d0e8d5f0b960b65c3285c99b2f7d747657bf77afb9057a6d28bede1a72d45cb2125a8902150685e3ca7171212e01d224e876feb972d5ded4313c48164034bc0244ec73e687d87b44c33a16e8471e25e1a58094dfc509a007a3f2c010dfffeb80f36febb448fc40fe301e897bbe1aeb2a7a7ca968b22bb5d5ad5b366a4377ae441937f2b60a4e3ec6c8a90dd415cc47ae6dad270eaadab63c7f321b3af28d9079759da8b18167608a4ae2e08a84f84eeccb08c56cc476ed0db598c174437c1eace848c717a7e5aaca4e35d861038326bae04ebac9bc451fa4c5d60bd52eeeac89e01e11b3719f07b33a4192709713d120b0f7bddd82cbb13c321ccd87880993eedb0e2a8ca88dd7ec9af1367240b20209f96c237e067889503fee6bf3787a4d90570de215fb02d11a82a379303bbb5ed40d0432a317b50ff1ef21bcdf57f894a6938ad35396b6bf8dc24287cea55c472b6bcd7a2e3fd4a6cdf3435e54170fac4f116fdd3817240c940fea9b0509b5e047f23e6f7ef05d04ccdd39bd8d70e1a130e72fdf6c1e96979fde4365e879d0", 0x1001}], 0x1) dup2(r0, r1) [ 2800.846533][T29522] input: syz1 as /devices/virtual/input/input519 [ 2800.920170][T29522] input: syz1 as /devices/virtual/input/input520 [ 2802.130131][ C1] net_ratelimit: 14 callbacks suppressed [ 2802.135986][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.141753][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.370229][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.376071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.930161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.936065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2803.330144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2803.335959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2803.810143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2803.816066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2807.490120][ C1] net_ratelimit: 16 callbacks suppressed [ 2807.490130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2807.501542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2807.970128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2807.975957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.370103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.375859][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:38:21 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:21 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, 0x0, &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x33, 0x0) 12:38:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 12:38:21 executing program 2: memfd_create(&(0x7f0000000340)='\x00', 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x187eff7, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') 12:38:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) fcntl$setstatus(r0, 0x4, 0x2800) [ 2808.610177][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.615969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.755695][T29750] input: syz1 as /devices/virtual/input/input521 12:38:21 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:22 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, 0x0, &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x33, 0x0) 12:38:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) 12:38:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) lseek(r0, 0x0, 0x3) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x828001) 12:38:22 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, 0x0, &(0x7f0000000080)='\x02\x00\x00\x00\xb2\xde0\x92Z\x1d\x96BCy\x17a\xef\x9e9\xfbl\xa8z\xac\x88\xe2\xec\xa8\x836\x9e\xd5hp\xd1=\x9bN\xad\x92\xa6\x81w\x05h\xe1o\xd4r@\xf2', 0x33, 0x0) 12:38:22 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2809.170123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2809.175924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2809.198827][T29875] input: syz1 as /devices/virtual/input/input523 [ 2809.330606][ T25] audit: type=1800 audit(1571920702.467:4735): pid=29877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16740 res=0 [ 2812.530159][ C1] net_ratelimit: 14 callbacks suppressed [ 2812.530174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.541835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2812.770140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.775956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2813.330134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2813.335939][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) 12:38:26 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 12:38:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) 12:38:26 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000500)=@x25, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000680)}, 0x6}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"/329], 0x1}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) r5 = accept$alg(r4, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x89e5, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x20, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x1}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) 12:38:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) lseek(r0, 0x0, 0x3) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x828001) 12:38:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2813.730111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2813.735917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2813.837152][T30098] input: syz1 as /devices/virtual/input/input524 12:38:27 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 12:38:27 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic}) 12:38:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:27 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\x10W8`\xb4\x8e\x03\xab\v\x81\x10@\x8d\x89=\xacT\x03\x188o\xc7\xe2\xd7@\xbd1\xe7W\xe1\xae.=\x91\x9d\x03o.=*\x17\xab\xcaB\x87\xaf\xd2@\xc0\xf4\xb2Mb:\xf9\xf1c\x12uZqeK\xf91\xe5pA\x91T\x1d\x13\xf5v-\xad\xc2u\xe1\x12\xa8\x03\v\xf0b\x1f\xa1a\xbctI#\xb2+!\xb6\xab\xab\xbc\x86\xcd\xc1\xe0\xa0V\x9f\xbd14^yx\xc3\xc7\x17P\x89\xf3o\xc1 \x06\xe0W^\xf9i\xc4^\x8f\xb8T\xb3o\x9a3\x19\xfb0\xc0\xa7o\xe0\xf7\xa3\xcc\xb8\x9b|{\xbe\xde\r\xe1\x10\xc4\r.\xd3I\xc6\x87\x12/\xa0\x98\x89+\x87\xa1l\xc3T\x0f\xdf\x9c\xb2\x89\xa4P\x9a\xad\xdc\xb1\xe3\x89\xbf\"9\xdc\xd6\xc8\x86X}\xce\xfe\xa2 I5r\x1c\x83\xba\xcd\x0f\x17\x7f_\"\x94\a\xce\xd0b:\xc9\xe9\x8a\xbb\x96|\xf5\xfd[\x86~\xb0c\xf3\xba\x1e\x0e\x04j\xeb\r\xa01-\x17\x1fJ\xa74\xac\xc7\x12\xe6\xf7\':\x83\"\'i\x8f\\%\xfc\x87\xf2^\x96\x1c?\xdc\x9dN\x0f*\x1e\xc6\xa0\xefFf F\xe9\xffT\xf2%\xe0{\x83\x1dk\xc4\x01\x04?6\aH\xcd\xbb\x1eu\r\x1d=\xe8\xf0\xb8\xbd\xdb\x946)3\xc2/i\xbcq\xc1\xd6\x9e\xdcLI\xf1\x91\x92_H\xb6\xc4\x1c\x1f\xd5\xde\xeb\xe6\x98\x1e\xa2\xb6S\xf1}\x8e\xad\x11\xda\x91\xfd\xc4\xf3wr,\xe63(R\xd3\x10\x1c\x061\x05\x19\x1eX[\xa7\xcb\xd3\xfe5*>\x18\x89\xc8Obe\x00\x00\x00\x00\xff.p', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 2814.210792][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.216778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.239894][T30217] input: syz1 as /devices/virtual/input/input525 12:38:27 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) setreuid(0x0, 0x0) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:38:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2814.642220][T30227] input: syz1 as /devices/virtual/input/input526 [ 2814.648732][T30227] input: failed to attach handler leds to device input526, error: -6 [ 2817.890139][ C1] net_ratelimit: 16 callbacks suppressed [ 2817.895829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2817.901803][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2818.370121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2818.375886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2818.770123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2818.775909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2819.010131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2819.015901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2819.570128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2819.575905][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) 12:38:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic}) 12:38:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) lseek(r0, 0x0, 0x3) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x828001) 12:38:33 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f0000005900)) getpeername$packet(0xffffffffffffffff, &(0x7f00000059c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005b00)={{{@in6=@remote, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) getpeername$packet(r1, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000060c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000062c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000006900)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) dup3(r1, r2, 0x0) 12:38:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2820.179877][T30342] input: syz1 as /devices/virtual/input/input527 [ 2820.238921][T30342] input: failed to attach handler leds to device input527, error: -6 12:38:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) lseek(r0, 0x0, 0x3) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x828001) 12:38:33 executing program 1: syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140), 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x189) r5 = getegid() r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r6, &(0x7f0000000780)=[{&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000700)=""/30, 0x1e}], 0x3, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x10000000, 0x1fffff}, 0xc) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, r11, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r11, &(0x7f0000000040), 0x8000fffffffe) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/862]) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000680)={0x1, r12}) dup3(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1, 0x80010, r9, 0x0) write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x80, 0x1}}, 0x14) r13 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000bcefe4)={0xa, 0x4e20}, 0x1c) setregid(r4, r5) 12:38:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f0000005900)) getpeername$packet(0xffffffffffffffff, &(0x7f00000059c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005b00)={{{@in6=@remote, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) getpeername$packet(r1, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000060c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000062c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000006900)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) dup3(r1, r2, 0x0) [ 2820.619495][T30588] input: syz1 as /devices/virtual/input/input528 [ 2820.638154][T30588] input: failed to attach handler leds to device input528, error: -6 12:38:33 executing program 2: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = dup(0xffffffffffffffff) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x2}], 0x3, &(0x7f0000000640)=[{0x10c, 0x104, 0x2, "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"}], 0x10c}, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) fcntl$setsig(r2, 0xa, 0x25) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r5, 0x0, 0xfffffffffffffffc) sendfile(r3, r5, &(0x7f0000000040), 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) fstat(0xffffffffffffffff, &(0x7f00000005c0)) r6 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x20004800) sendto(r6, 0x0, 0x0, 0x4000000, 0x0, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x8200, 0x41) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000180)=""/72) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) 12:38:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2820.993735][T30877] input: syz1 as /devices/virtual/input/input529 [ 2822.930147][ C1] net_ratelimit: 14 callbacks suppressed [ 2822.935983][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2822.941725][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2823.170152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2823.176204][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2823.730128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2823.735951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2824.130148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2824.135919][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2824.620120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2824.625938][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:38:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) 12:38:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f0000005900)) getpeername$packet(0xffffffffffffffff, &(0x7f00000059c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005b00)={{{@in6=@remote, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) getpeername$packet(r1, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000060c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000062c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000006900)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) dup3(r1, r2, 0x0) 12:38:39 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 12:38:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:39 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x6a) 12:38:39 executing program 2: r0 = socket(0x100004400000010, 0x2, 0x0) write(r0, &(0x7f0000000480)="2400000052001f0014f9f407010904000a00071004000100f6ffffff0801000000010000", 0x24) 12:38:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0xd, 0x0, 0x0) 12:38:39 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x6a) 12:38:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f0000005900)) getpeername$packet(0xffffffffffffffff, &(0x7f00000059c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005b00)={{{@in6=@remote, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) getpeername$packet(r1, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000060c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000062c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000006900)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) dup3(r1, r2, 0x0) [ 2826.877572][T31210] input: syz1 as /devices/virtual/input/input530 12:38:40 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) [ 2828.290213][ C1] net_ratelimit: 16 callbacks suppressed [ 2828.290228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2828.301642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2828.770167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2828.776872][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2829.170137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2829.176030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2829.410115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2829.416006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2829.970141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2829.975960][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) 12:38:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:45 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:38:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xffffff80, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f61a8bd180bfcce64d0defb1e1a4d3a"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4004700e, 0x0) clone(0x10000200, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) memfd_create(&(0x7f0000000100)='user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f3583", 0x70, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000000540)) 12:38:45 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x100000000000231, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 12:38:45 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1ffffffffffffe9c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffe}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) seccomp(0x1, 0x0, 0x0) 12:38:46 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:38:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:46 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:38:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 2833.330141][ C1] net_ratelimit: 14 callbacks suppressed [ 2833.330158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.341681][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.570103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.575914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2834.130128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2834.135990][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2834.530134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2834.535919][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2835.010126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2835.015892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2838.690129][ C1] net_ratelimit: 16 callbacks suppressed [ 2838.696006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2838.701771][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.170125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.175956][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.570087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.575975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.810130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.816076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2840.380111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2840.386015][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:38:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x0) 12:38:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:55 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:38:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:38:55 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:38:55 executing program 1: pipe(&(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(0x0) clone(0x2009ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2a4500, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 2842.225437][T31586] input: syz1 as /devices/virtual/input/input534 12:38:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:38:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 12:38:55 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:38:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:38:55 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:38:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 2842.717815][T31604] input: syz1 as /devices/virtual/input/input535 [ 2843.730107][ C1] net_ratelimit: 14 callbacks suppressed [ 2843.730116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.741605][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2843.970201][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.976150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2844.530139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2844.535924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2844.940105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2844.945903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.410138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.415958][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x0) 12:39:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:00 executing program 2: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:39:00 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:00 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:00 executing program 2: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) [ 2847.401357][T31623] input: syz1 as /devices/virtual/input/input536 12:39:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:00 executing program 0: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:00 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 2849.090138][ C1] net_ratelimit: 16 callbacks suppressed [ 2849.090148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2849.101578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2849.570143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2849.575946][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2849.970144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2849.975913][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2850.210124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.215987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2850.770154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.775981][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2854.140118][ C1] net_ratelimit: 14 callbacks suppressed [ 2854.140127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2854.151614][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2854.370109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2854.375984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2854.930126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2854.935995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2855.340112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2855.345922][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:08 executing program 2: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:39:08 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:08 executing program 0: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x0) 12:39:08 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:08 executing program 0: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2855.810146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2855.815993][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:09 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:09 executing program 2: socket$inet(0x10, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:39:09 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:09 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:09 executing program 2: socket$inet(0x10, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:39:09 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:09 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) [ 2859.490163][ C1] net_ratelimit: 16 callbacks suppressed [ 2859.495841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2859.501625][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{0x0}], 0x1) 12:39:13 executing program 2: socket$inet(0x10, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 12:39:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:13 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 12:39:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2859.970114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2859.975970][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 12:39:13 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, 0x0, 0x0) 12:39:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:13 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:13 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, 0x0, 0x0) [ 2860.370092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2860.375961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2860.610121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2860.615951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2861.170136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2861.175954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.530135][ C1] net_ratelimit: 14 callbacks suppressed [ 2864.530145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2864.541557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.780111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2864.785885][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2865.330123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2865.335919][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2865.730134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2865.735933][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{0x0}], 0x1) 12:39:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:19 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 12:39:19 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:19 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, 0x0, 0x0) [ 2866.210157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2866.215977][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:19 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:19 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, 0x0}, 0x0) 12:39:19 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 12:39:19 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) [ 2869.890148][ C1] net_ratelimit: 16 callbacks suppressed [ 2869.890163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2869.901888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.370118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2870.375927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.780135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2870.785925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2871.010122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2871.015916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2871.570129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2871.575933][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{0x0}], 0x1) 12:39:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:26 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 12:39:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, 0x0}, 0x0) 12:39:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 12:39:26 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 12:39:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 12:39:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, 0x0}, 0x0) 12:39:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:27 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)}, 0x0) [ 2873.931090][T31913] input: syz1 as /devices/virtual/input/input540 12:39:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 2874.930119][ C1] net_ratelimit: 14 callbacks suppressed [ 2874.930129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2874.941798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2875.170151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2875.175933][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2875.730136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2875.735935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2876.130161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2876.135960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2876.610166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2876.615974][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{}], 0x1) 12:39:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={0x0}}, 0x0) 12:39:32 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:32 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 12:39:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2879.934092][T31940] input: syz1 as /devices/virtual/input/input541 12:39:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 12:39:33 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 12:39:33 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={0x0}}, 0x0) 12:39:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2880.290116][ C1] net_ratelimit: 16 callbacks suppressed [ 2880.290146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2880.301601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2880.483755][T31965] input: syz1 as /devices/virtual/input/input542 [ 2880.770118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2880.775929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.170120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.175953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.410121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.415874][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.970120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.975888][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{}], 0x1) 12:39:37 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 12:39:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={0x0}}, 0x0) 12:39:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 2884.264377][T31980] input: syz1 as /devices/virtual/input/input543 12:39:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 12:39:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:37 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 12:39:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:37 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) [ 2884.766976][T32002] input: syz1 as /devices/virtual/input/input544 [ 2885.330128][ C1] net_ratelimit: 14 callbacks suppressed [ 2885.330143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2885.341546][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2885.570155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2885.576047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2886.130126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2886.135951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2886.530126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2886.535915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2887.010122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2887.015889][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{}], 0x1) 12:39:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 12:39:43 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:43 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1}, 0x0) 12:39:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2890.590219][T32021] input: syz1 as /devices/virtual/input/input545 12:39:43 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1}, 0x0) 12:39:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 2890.690088][ C1] net_ratelimit: 16 callbacks suppressed [ 2890.690123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2890.703491][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:44 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1}, 0x0) 12:39:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) [ 2891.170107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2891.176122][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2891.570147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2891.575950][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2891.810166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2891.815994][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2892.370195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2892.376425][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.730168][ C1] net_ratelimit: 14 callbacks suppressed [ 2895.736160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2895.742111][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.970123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2895.975925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2896.530163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2896.536088][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) 12:39:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:49 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200", 0x12}], 0x1}, 0x0) 12:39:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:49 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4) 12:39:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2896.930102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2896.936012][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:39:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) 12:39:50 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200", 0x12}], 0x1}, 0x0) 12:39:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:39:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) 12:39:50 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200", 0x12}], 0x1}, 0x0) [ 2897.420132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2897.425948][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:39:50 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r0, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2901.100133][ C1] net_ratelimit: 16 callbacks suppressed [ 2901.100153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2901.111628][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2901.570201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2901.576244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2901.970097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2901.975862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.210128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.215913][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.770111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.775897][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:39:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) pipe(0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) 12:39:56 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808", 0x1b}], 0x1}, 0x0) 12:39:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:39:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:39:56 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808", 0x1b}], 0x1}, 0x0) 12:39:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:39:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:39:56 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f000003002808", 0x1b}], 0x1}, 0x0) [ 2903.491604][T32129] input: syz1 as /devices/virtual/input/input552 12:39:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) [ 2906.130133][ C1] net_ratelimit: 14 callbacks suppressed [ 2906.130142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.141598][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.370142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.375957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.930123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.935917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2907.330159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2907.335916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2907.810136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2907.815960][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:40:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 12:40:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:40:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:01 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f0000030028080008000400", 0x20}], 0x1}, 0x0) 12:40:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:40:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2908.314389][T32151] input: syz1 as /devices/virtual/input/input553 12:40:01 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f0000030028080008000400", 0x20}], 0x1}, 0x0) 12:40:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 12:40:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:40:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 12:40:01 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f0000030028080008000400", 0x20}], 0x1}, 0x0) [ 2908.641639][T32168] input: syz1 as /devices/virtual/input/input554 [ 2911.490161][ C1] net_ratelimit: 16 callbacks suppressed [ 2911.495834][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2911.501607][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2911.970133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2911.975929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2912.370146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2912.375925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2912.610132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2912.615908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.170138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2913.175908][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:40:07 executing program 3: mknod(&(0x7f0000000200)='./bus\x00', 0xff, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f000077ffe8)) clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 12:40:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0) 12:40:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 12:40:07 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f00000300280800080004000400", 0x22}], 0x1}, 0x0) 12:40:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2914.569464][T32192] input: syz1 as /devices/virtual/input/input555 12:40:07 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f00000300280800080004000400", 0x22}], 0x1}, 0x0) 12:40:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:40:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2914.861340][T32207] input: syz1 as /devices/virtual/input/input556 [ 2914.960639][T32213] input: syz1 as /devices/virtual/input/input557 12:40:08 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f00000300280800080004000400", 0x22}], 0x1}, 0x0) 12:40:08 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 2916.530141][ C1] net_ratelimit: 14 callbacks suppressed [ 2916.530154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2916.541695][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2916.770194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2916.776107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2917.330188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2917.336071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2917.730147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2917.736084][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2918.210176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2918.216146][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:40:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) 12:40:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:40:14 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f0000030028080008000400040003", 0x23}], 0x1}, 0x0) 12:40:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:14 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2921.890100][ C1] net_ratelimit: 16 callbacks suppressed [ 2921.890114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2921.901626][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:40:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:40:15 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f0000030028080008000400040003", 0x23}], 0x1}, 0x0) 12:40:15 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 2922.032132][T32240] input: syz1 as /devices/virtual/input/input559 12:40:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:15 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="24000000200007041dfffd946f6105000200000a1f0000030028080008000400040003", 0x23}], 0x1}, 0x0) 12:40:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) [ 2922.370113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2922.375960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2922.385540][T32258] input: syz1 as /devices/virtual/input/input560 [ 2922.396571][T32258] input: failed to attach handler leds to device input560, error: -6 12:40:15 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 2922.770112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2922.775992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2923.010145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2923.015977][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2923.570169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2923.575955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2926.940111][ C1] net_ratelimit: 14 callbacks suppressed [ 2926.940125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2926.951545][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2927.170143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2927.175910][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2927.740096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2927.745909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2928.130113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2928.135915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2928.620121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2928.625983][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:40:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000000000)="05", 0x1) dup3(r0, r1, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 12:40:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) 12:40:22 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:22 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2929.238611][T32279] input: syz1 as /devices/virtual/input/input561 [ 2929.246485][T32279] input: failed to attach handler leds to device input561, error: -6 [ 2929.297312][T32282] input: syz0 as /devices/virtual/input/input562 12:40:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) 12:40:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:22 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 2929.585931][T32396] input: syz1 as /devices/virtual/input/input564 [ 2929.608485][T32396] input: failed to attach handler leds to device input564, error: -6 12:40:22 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2929.945481][T32409] input: syz0 as /devices/virtual/input/input565 [ 2932.290165][ C1] net_ratelimit: 16 callbacks suppressed [ 2932.290179][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2932.301646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2932.770139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2932.775937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.170116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.175912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.410129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.415953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.970138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.975952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2937.330112][ C1] net_ratelimit: 14 callbacks suppressed [ 2937.330124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2937.341639][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2937.570126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2937.575911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.130129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2938.136106][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:40:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 12:40:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:40:31 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:31 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2938.530114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2938.535927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2938.648238][T32424] input: syz0 as /devices/virtual/input/input567 12:40:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 12:40:31 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:40:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:32 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 2939.020129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.026145][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:40:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 2939.136762][T32445] input: syz0 as /devices/virtual/input/input569 [ 2942.690125][ C1] net_ratelimit: 16 callbacks suppressed [ 2942.695800][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2942.701578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2943.170104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2943.175891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2943.570143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2943.575961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2943.810137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2943.815976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.370105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.375960][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:40:39 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 12:40:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:39 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() io_setup(0x10000, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) wait4(0x0, 0x0, 0x0, 0x0) 12:40:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2945.979414][T32466] input: syz1 as /devices/virtual/input/input572 12:40:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:39 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 12:40:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:39 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f00000000c0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) poll(&(0x7f0000000500)=[{r0}], 0x1, 0x0) 12:40:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x7f02, 0x10000000000000, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 12:40:39 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2947.730136][ C1] net_ratelimit: 14 callbacks suppressed [ 2947.730145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2947.741619][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2947.970145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2947.975910][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2948.530138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2948.535942][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2948.930131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2948.935930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2949.410120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2949.415887][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:40:43 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000072ff8)={0x7fffffff}, 0x0, 0x8) dup2(r1, r0) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r2, 0x2c7, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='n', 0x1}]) 12:40:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') 12:40:43 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:43 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x5) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000024c0)=ANY=[@ANYBLOB="de572c1d2267b6d8374c5c457251ecd8b68fd2fa29d29364164153b7e62493b2c3d186af30411d413d7c5c32c9f6bf027221268c4a2cc6454a03ce00a2e0dec55c87e5689ce2f4b2cf11d275897ef2ce5c6bf48edac6eda6a8db116fd5e9ae6663b713b85399aa1156fb97a897a1eca5cd9d655b6d5ffd0ee4154dc69efed5a703f1e5ea008e96ff9af24f0e5193e7109dc0d2b897e5cdefcb4b0d", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB, @ANYBLOB="812377cfaf3c9b608c2117c203ce709ed16878122c51713b16a08f1a7e8d96448b94c83fdaea3e78383c03bdcfdc81bab44e518411d4ad0a090c2273224f76f4e080b6669b58ef1a92c16b167079cfb8b4d25620ec7d2f59b3460b6400ba45e91d7bad889e320129fbbd5fd0c43c97519c4d136bf054713155b882fd507c1a9da5ffc00a9fbcbd4343a4387d3ad5473521b4bda101dfa7e1b772a2dd4578fe75d54ac94069a7bf8198ff5c1915cc9a8db502d480317327fbdc00206e075b1b9e4b96749ff0f4de01daa440795d67451ac958c0c6712c4424cc3ed5fa6dcbba7482276f1ddeef60299eeee08b7ee2949f0b43662dafad7c22350291e1afb93de336fa29a443a6c805210b2874264ac06145b98f93af592b2eb7b3dfdc1fb674adc4c7faa7a85d130b766ef204e8aad946b6123a1a2c4333179aa9692db0357b345f99d9f52521c57938db612089ddb489d2a9a2119af46369dd0abc6dfa84744b6f2f2fe72e67a2ad9f9ff68dc86de2466302a58bfe6ea9d0914125022c7840a0a9b6409e20422bcd4fa55fcadfd92e466f5403c3353e09340a0593e50701a6353952e6658038782f39942aed14b2a41b892f33352b29267a62a140494f7bfdd464e4681712ebbe67a6b426d6577dcb7f32dbb5ca8d44693f065abf312bb24b54a4eab4856a20735a6ddf7efeb2a5d5c028f291683d36c172c522a543fbb5155fff923e47e7abcab2e0a6d580cb30d619524f73241f26b0c0a81c14ad62e923e7442c4b34f62485c923b3d6154bb199daffd34c2662f568d68e704aac9f52969bf1dad77bbe28028e085ac81889f0714fe5b6f8f6d81e444e4b40f40907504636ad4978514d3655f08bf4cdc03c6b2345b4e7425b389fa2b84d2eba741a5fb16ddb2b427f763ce6e20d94fff5dead33f5eefa3a5173cd4c34da7218821955cd0fc626bb9f1b25589bf5751c035fd7ba5a089073d3e2af912c7644f82ba75a9bc19736b8d2682d522238c2710586e7cd99227850596b831c131f28b27753721a707ff3e555864b87ace43fd7fa0772e76d09618bb66512012acc10bcc477b01baa0bf233fb0ffdb85a71213bbb0f9543ca62d31370ba0ea6a6b20114dddce7ce22b0c7ee6319fd278a64e9967115a703ed3f04f3bc603a495108f9ae43e105261c026ff02b15c31f07c56efbc88e34f2a2de580887283b4b37909a3c78d1c7d3a8490e5a3c9da023665a73b51a53c7b18cef3ddc28aa79640ca36ad1ec77b119e70dae8feab84cab19274033a21ff3a5688015466ec3aa54818b76c2b02a5ae2928ec8ef6073384784103c93a15fcedfa0b8683755937f8e35a6b2e31688d322298a3778a13a845d30cb6cd1c19889a0ffc43cc2b74012fee3645ec59e7dc688764f6217709b97516cb97ff3915182b88ac583b61b94908091b27725dffbada821c0efc60ceede413abef7fdd1761bcca5da3e285e2435771afbb16b8b370c69a7afcaeb255b79754c5bd9d76b5ba86701fd65927ca8823d2ee5241bc12360fca7d7f38a5ddcd394b73087f860e9b6c54e0e93d72e61d736e4296ab1f67da494f1351da0ef32f3ed2cdd661a08a8a8e026f7bc327a624e61cc836f21170477aef6b93a71d24c304388bf797f1c9e108c18ba59d5f2e02123398971ecd3f5b68f974358900497c5385cdb548e4ca09ca9c74887bfc87fb88793c504459af2a6048ce931ba858ce96f192a73721f81ab19d610cc93b041dd3daa5f85e1eb214af77b2a07bc39f427f40b786353a44bb0bb77718ab38a3ee8cc2bdfd1010ce61e917eb08022d240ec2c7607ce7b84b6b508b0b133c3a9bc7f0ab77fb722a42b12dd63dc9210908b7757b0dc6cb7f27305a68b20ff2456a9788d94750d512bdd7619e6f4e3bb19c82f2e216dbc1e22340bce050962aaf06fdefd61c7ed4b6f110561d141418ee72b1931a7066526c18cc06ff6c5488d5afdd899a02df144f7ef77ca90eee6204b7789d9c5b619e136be0764eefbacf6d10d95824c816ebd6122c42c8e88ab84eab60029e8a785397b08e7586df04be0b940e2fdc9f618cc60137444f3d5a3c35c69a21ee2067a1e9962a332f3c9c65964fef0f51384fb60e9d19a932685a0b74cfdecf764eb922800dfc7b27891717680e448a87f813b137efe2e434a3f61eb26c2866ddc67727360dbc6bf49e7e8d6b651ce22d228eae40357d9df92e729d4fd2e19b0d6235079ba2ecc11a1a09f4a51a2895bbb0ea10a35b8fb7bf5ed3770bfeefae54613689ea2ad9500de6aaafe4faa48c1e098929c1ad0dd2c8ef5cf6f98ceb019bc58c4bfc18bddaa3b1069a0b31da3342c5972f05ecef5681ec1b06ee9d47225f57a055d9f9f5678c8f68162c9cdb4b8beead1db0597bbaf3be28609d3a4a24cb2d379cea617e7133a2260d9e6c2ece45253597cb71f9cd98d8b903a12ad2d0eda3011207508f49b3bb0081d26aaca6fa15128922310119aec2d3a99a5954279b58d0418fef95db34d7f5a92986e202581d5d7661db76e5ff5d022760d461da584d40f87b31aa7f68bd1fe296ade4a1932e0ac0c6506df52a87ba16d629fc1e84d469a0a66af71afef5f7bda15db6bc40f5b043c9a0426483ca95cd93e789794d31f624556e67472ed80a1c1aea8ba25c417147585c13e14b05e8c7c3e3cd6bec9ae131752d0d88ddec1b9792c18d86798737a69ead4684186ce20f92b2a75531099116463637481881ee507176161079a02cc303a15b93d6cabb29a2bf9fcd5257b08f40f1066c1b99e8c7679b2a20313a01ee9dfab79b9547cb14704fff494ebb8791a08788e929ed619eb38eb47ce3ccc74090fecd3858922d05495b0849025bb325e512a74009698240ca63b178efa234a653ac226ec3bf9044548989708cc060f526e0410dc4f41b0dcb6f043e69c9ca1709b275f9acc2f945b930dfd2c1fadff456f0939d21c6fd4066c5294d56c49a684db014397359016c7d702d2cfb0a284051c61b79ed9ad1fddbd872117160f32e0448529beb14e6bc7843415968d368b75504c8188fb993442ce0d5ea9e6b393176f2baf6b750896b6a846c8ae8be9ed3597b7e50ae22618729cb5853162b2a4461d5fde6a6fc08ea5f51247a71b02a16fded01597a717aa014473badc6eb81723c4ec3df4b7890d254429cb5e5bd85fe074bd56b5c9bd1d6464a83420ee5ea9d7e8fee1ad544f4402bfab103c49412913a866659c7c0b8499224968427af79638f60cdaafe21ca2f8b04887ca6174f2f17d22d6610e9bd2ea08347dea5b2682c7720add9e68e07bc389e3ff1d16aebd167990c29b4ad44cba065d7c9f7d473f225580a4250057087a9baecb49627161a47e39b491179022af35f82753a58709a1bd8bc1ad6ffc232c23da2ca6eb2697e6fbeb7bb48fb078d6a6ce4d47773943f17b2f9e29039d0696e18ff6acf081befac7e0db9fcaf0e2ac91130bd80a8f268739beff22b33fff57eb344a5950c4f8fb2c92d1ccea11823d4daf380bbf307727311de5c6f63493e93d1b31848b82cf6af39c7a1cb670023a3d1c9163d2d6414ab4ddffdc84eab7488fdafb44baffc20d3b5d806acb39565c6420b2ab3e1572642962a4d1472ea5af921e1f8dbd83eba6485ccd934d6f921baa534c9b6a805ed19cf6db2bdebfe3d7eafcc968a2d5408a3f009d7c7481cbb4afd0b23bea8bb7cd034c154cbd1b28e16a8aeda15ab0a6904dca803abe2463aeb5b33cc66dadd69b67a425f08a1bd66a47cd01f45ab5da77a6cd6810ee20d8d91c66c0c9438c96320d5b8647e3240b0be3a3fa6df5777fb3fab401bb99d8a372e9766463f596059afb0b77112fe1b8baae64e3bb7b8e9542e9f15cd9cfd21cbcde0c4b606982a53c805550831b56d806726246c5424aa5c773b2a5e15f2b7662f69cc518381f993e95a307ef244d26aa8005cb1c4dbf0bd9029ae7e2039c5c54fe150b5ef75f45e06c19c7ef2a5ade4b6eabc8ceade08550353ffa4ce9f12fea234dfb8e45d5a7af938651841c5b94d64576b2a874ca61d38ff2aba4e9fb24487f1e1db7c74cad298921adf1cbb9838b5fc00cfc7d139f603368e8915741b54a2bd3cd6898f0e89d9c28796356611d14f73d7d9e3b5f9e53be3d05338c5c05de9fc4b75c1adc7c4d82846bd0f06ae461bd1b84d77700a30fc2d0f6d11c30df1269604378b5349ad5349fda0112a1523e21b5bfc7d4563b83d3b09c8fa15190eeb3d5b78943843052cdaa9eccd5f3ff3f960bb336860068a128fc0ae033942c7fd5c0aabdff863c20f712dca97e66c157f1ed48b599f61a611e7142d2e007f9b8be8bded5ac7347459701bc9b2102f44788486f5b22ef5b71723de6b100ad972cfba6b787fe2507b66d1a05f0807cdb6d0655d28710153f9a4c0da207f51f95d1f3d6d9847eb51516b08fcf308ea144b3227b63d8b68959e886098b792b2216e8ac126b4b11ef78c8c2d83a30bffdf148694a608aec849631f96abcc7d2e87dc86743d9e81f99313b499968e3f36f33efda682d5a325b67bc4d2000e051bc1e933270576e632ecda65cd81db3ed45114a9c57029d285cc4e89fb5d99926755008f15d7c2d74aaf2a228f9a126aa77bcd8bbb4ca113e1dfcd61f36bb8cecaecd1ba657d4f6c31c3376fcae44ee043f9f1023d02e9f357e3937d5f8cd758121d9abcd56513d4c9f91166c968271b398c1a71ca146596442b53037f4db8c6d3dbed353d4a8d8ddc82bdcc7c3c10108d9b40a8f416cf9d2a3ed7a6813fb651bf7ded209cc6d0aa7aa53d53d54fcc7551bca16d7bef326448a8f17b19871d2cceaf542c82dd95a37fc6ac6024ef9b6d30a6d849374e0182c9740ad07bc252322eee8159664d9a65f933329b84aefd92367bfc23e19eb4db2816cc12ef53e51de17b8b20ef820f5a6df84f1ddfb11cc9ad5487e533f6cd482028e010f446974f5a3903d1d69bf9a8d11f9611019182ffb448947456ffcb78c13fdb0e02d2d2d83b0565b9d7310e4eeba6a7f5a8b06acf7d0108b372a2f4bf7662bf646f280601ee35109706648e3d3cf546dd6b0fadf16", @ANYRES64=r4], @ANYBLOB="c90ee5040acb25a29030a9fe13196f5d4e6dc44a842da4263a394430108e445cf19eaedac9bcc8be992236c2239a207ac965e9dfae9cbf6b0d82ccc8d70e8cc6d4b19352d384c54879dd274de99c847886da3b4f896b5fd6fa2e15fcca89945adff282ee160a548b6118ae6068b949270fc63dbd7fab843afc159abbc84c716105f2022483e3744ddfc481b36c70c32728bda495745bf9084ae1467b94d3b82944b0af5323d7b7a2ddf06ad21074175ae272f6d5d05ccd6754e54c67c9f06e9ac097f464b1f41c713c7a9049114a694015f8f827f6dc3a4b31dc8cdf46d89e9a6e952fe7b09f1ac89184acd4ff287e395ec8c8b741a69613c043b4c63ed444fe9dc760eda27328c8dcda93e09e89cedcfbde429a52a56b93cf1fb59b72e2df8e3b030905c19109932024afa7f23a94bcae2a5cc336b469e8b0a7bfef097b03cd624a3d43ef2851c4dfc232fa6cb0f92b6b5466267b3f9ec5a16725d6551af134a180c2eef12f223818d60a0ca871b6062f5924885d979ddef327c08d35c28b7221739fabf64d711f3bde620bc550a903994ecb1dbcd31f4b50aa246290a4df496a642cf15839a013599662a6de6befe95f6d2455124c1ed32f0967390448e69b76960ebe1f2a2c168636580044663d2b5efedab0401fd57e27babb3e85069cdfa606579bbac9e13fe0d14cc71281e829ede3c7ea6bec61a5cc589fd0b8c35917b9b91ee1b5ffb45619070958df1dbb30a8872959c8440c22bf53276cce1c1a29b767cd14e4c8ea7f6d128bc185a8ce3ac7655c2b1109de57a469657107d9893859a82146d97d9c704d3866a8cde7619cfcb6d8b50c72b335f22e1ac12a3040c23a505870f1a0e22ef54a6639efc4773fa165cb471b95565d715c071a9beccda8a4de34ed44265537002aeae328563c54d80a534e48b5b97ea208a63a1951167db42ca09fa1811c992978f80eff151d6623a6b3b55cb70f9a416f932d2f72c6cedbe25c3b6067d77fecdd6ad0f34e70f662b3538d69a465282c20f1204db5c8431e61235e93b56cb543a96e27af482dc49c4a9ccbf7b3d12b21264de09bcbab2cd99d36eac2228f3e96362ab045d01d3b89b08eef3e8267083b656ed3484db87cc79decda4de4b6499c4f9c38b7375d2f22af8ec3f01e131c5bf9f2d19a23433cd0f74d0dca2bd170db503d659a8513e800216063ed6f915cb302fea57d12e5ff645ca47a28353b8f10860eb94bf90c3ca07cebab165d33b14eaae5d81ccf53b343ab6a8cd8252876812103fa552fa97cd201a16aa1ae0f06dfc01af35e2c239f9e164e427699799940d40213ea127d82d11a531bde4047bd014e4e4d28f049bfe6e694a4e47fef27714b7b3b9ee678f528ff6abad2fd45cba7ac6ba0927fc19169015f49dbdac4a1078e2cb671f6b86291ea7edf32b301bd60680bfecc8e929829c93cf40497c62bc283cd2b4c8ab40b9afef24936e0f6be48fe702ff92c6b93d1976fae1a6a99ed3e9365b3398679167ba24d2cfa2363de04588e213e53160335794b488cd25ef4eea7c10553824c301f97e1b8fa2bd19dc97b21f629f39dcca11f031563a1c5aa63bd5adec339428e868db56cbe3557fae337f3dcd66523c4a36e90cf7300dca0c4d96c6a81ea0a1b189fd67c95b77ccddfe7930bd3df670325f4487ae83e1f5c3e4569e7dbc0c81f5676cb5ab42acf6cc75b962d432ad5b7d32a8b45bbc16e3d0867873e12a030eb25b22db03a3bdc6184796617286c8e1dd45decafe0283546f6918f93f6cfd3999cbc4fa7ff945966a9aec8450888736d8f328920614e4c2a3558760b14eaf4b63edc7e99ab1332079b55b0fd9e12598fedf63952b00e60e29cb2ce637d6922ce472525d8527f93c50e30b4b26802ca97789e01e0e266d8a78772803d6a6c17b34ed14443fc5efe7f1a3b885cd0feaf26ce5682a3db896a67d4f32b67c7462f267d300f4298caaa010fd290a32b7bb50a2b72680351747ef34a7f70aa1433944574323181ee871d379ab7aa068ec527da1266aca0a76727571d1d4d2d91e6c76825855735ea799ad35e3cebe6f9c1bf2c7cfaf1f48fefbadff2d514e12750677634bed5a1a2ef73bce8ee40a30e66537396903f06d563b15e838873bb46d2e8611e75c88e5ef02e15071084edbf1a6e72afeaffc540792d993aacc2b358860a4588e24e6860a90c4e7884a69efc5daadb9cd38163189b3ba45316904fe31707818f58b00c50f5da078e075361e33efb8ccfa66f00b317219a543ae625a921645c81f67e3393e324380f93714dccfc04417c8bc648dbc289c102e867d4e785094925c09fb984d148b2664522259333da01beecdf29ac31b8e9947585ca2aa59131ad789f6226b552834cd8a0aefd2b37cabec07bbe544c7b0bdf5cbcfd88dbf64772f41ea7cc7905f0d33f1376212eb36988289abbd7b024fe90b91aae1f3c4f45ba3267b02ae6e99d17e5b2eb464a140be4c58e49a27e9038955458c18e18816c136c0cd5bd513090461693479aaed50d5566f0b0cc7d4c6d5a70f760ad883ac5e97b44b3f00fe5f4f4d0da05dd2d3edd6f14270a29cfe614b500c2b93f2d48d08dc983bc9ef5fdc01db92eb9bb7234dbde7c089135853cd0981d9a4930b7d798491f4e6e950c7dcb491d80efad1c8ff38e0b17e082df0d5991859e8538c1b2421efb24715c0dca2516b3e506e64015f73f5f134fc7e4b3e46535a9a08fb6012227e4c532a940f7c7194928eeccf43d0ad0ae5881c9ff5cdaf5cc160a1a15df859b0303771d52cc964668b88dfc3801c49df598f93036e1d9e4fea6dbbd50553199976b328581b233d1215d4629d5477ab82236b925a9da331c878fc71edb8f893e16467dd0bfb62bef405ae787b5f394d2c00db43ce4a94eae9343252d6117fa93ad9bda2a6750abaa4657f1216db5b7bfdb70d4a2aaefd7ca09b2015645a3729c44b5c9fa9d8bce02f6a4d11f93a0df61cdcf581f4f5380489074748ba4d35351a60a6681649a43e01d0b5a649f29878248e58ee7c2a6b7780bd0d876b86117d6dd7378898e2d86dd38249ae2e29c4f16a05f3d0d98b11d3ca703c91deec2a44ff06c6445a2eb42ecb8968cde8a43d0c997e47849cadb4b02006ed1103150bf004ee2eb64ed386b6d661ae2071e565b11624bde3aa713cf7eae3da012058127853cae1ccb79e9471e07243a0e9852131d78c118643e6b46a956eb88ecbb06f4f357845d6e782c260cbd358df255a54e49b9d49bca4cca9687ac3ee3c27dfc6688f167da2e41d57c8dc20a6453e1ca9f232d68738b4e65e165c5f4762e70b26fe9278c9abb8c4706bd7df4f84b6b5087372a8d57488ad521225bb732eaa1ffb44c6da28daa4fe09a97dcd70e2360b229b94157d7e3ced1f5b3d87db9e39f641303c7fcd59ecdb79b885211ae05b495d12bfde79d486fa3e387a0f163c72bb22a19995cfe320a58cfd66a60bf3c52caa1205781a1e9817283608602c743b6238df017057985c695246882f01cee9f25dfca182f64cb7247c9f00bec52a3ba61745736d4a8ec04cc2a8264b423e027fcc186988b76017e5e4f7cc7a7b3f10fba79f7e2aa6a585b058590d245b87c29c5d6a34bd84e5cca5222f322c750a2d1db41514d31f1ed96e211fe40393a1bc442995b21eb98110f1bb97b349dc7b5a81264378e60eef43d823602c30c1e4c75eb6b9220e0b14395bf638d4d4413d4dbf48e9d7ea75e17feb6c4627d423fe7dd35d2755922de71549d8f2ddb02056f3a5b45d6551c823e347a7c3c0ac99e26985624ef739c9e7f8ea582a53a5467f3a9263215e1c7e13ad43ea5d92b7111f6680b13f8e9f27b4e868ba15f4bdfec630fa51c482bbe030584c553a16be166666d3ea5d5d5a6ed3c2c7d0e30395b66d450b6fbbc3d91b8f3f9f8250215a6ce3440097814b673e1409e2208d2852dd112a3cc4cb1f2fcd118ecc14a071353853e35e08310dc5bf33533a70785ffa355eacde8c62585373d3b9435c0880d05cf6ef92deca39d2b6b98016560bf3ce04b409debc7d5093db612fa5739c09f6fab5f07bc30ddf8a6c52c60842b8dee4bf8da5269dec2177d4e2a6fbccc20c3db366979293d48721971aae1953d70a16104bce444bec3dc34502047d12b51383f55e73ad97e733fc8a8d0a415df413181f70fd908404b7b0d572ac69462ff9a339fd244305e5da3380f6c0ff56001915e5cb2f61c57819a769dca2e20227e3759024c16395f5e9f02a2d1d77a792b1e25c405cb81416dd2aa44baf4c7066041e7601a6a21e2f9a4dad92896dd80c5f4786dfae76b231270b4a6ec986df97233446a24dd44eca43394e6538a7021d10ada963c61c2d09a1656e1bacb58108a761b92f40facb3df54ea03af825e26cb755fa989d06d842377451870642ce8c4745fc1733d5e7260617f3e35704ad301685361ba1a80b4138763ff2132e514fdd3a6c822a0290d2a9b65d9197c91b0eee8137d0844ba7a8a7a6407088cf3947eaadb7dc9ff7d9fdfae7545603b004c60effff5fefa9e100dd42dbde652db18a24e4fcd6dfa449a602c2d51ecea2a22b044ad077ac7d3cedc0402500e23d458de44d04539e7c891b1a479e8f168be4efe803dc93ca75b10b47a2141d64b54b784f4bd4b5d5cef70b5097029d360766c40b4a9da09419c37c3c08614ad663cb6ab37056fd605fb630c04eb032d783acd44511fa87ac9f98c1862369a6b18de118db27041047a0798a54003930d38d98849e5dcf0e2ab0b69f0710dddfca8a7613b714394e99348823b965985b7936dfe6ef24672643f8910655c33982bf6ba52e755ee91969a9d91916f7b9833c83a6b13a12890950b674e9261d8a06e4e3c1abdf3b7827635315e18b6e5fd096dedb3d05ef61c1ab4c653a91d658740b775c1ecd09a5ffdbb2a7b09b3995a1d6a7e6906ee472a20d6d807b1dd7a57c0a9b64be58b7b1680a4051b40f676ac31a36045f93f498d297ea68c6ee5f5992fc3940f873ed624031626cf4f7d23f2e6ec2a95e806eccc25659c3bebc3609bf067c3760674547b1f3a9ff9dbfcd0f224a3c73d480993b765f35c7dfe83a2b6324e9bb8049d536bbeb329572c1b040771e6920930b277760d85bc756a4f85be87d53e3aca3046f75a038e040dcb4b3574d9286d55b4df3e7b55b75af2f03d451e248cdf31b35c6a4fa92c2d44f94386229c188b5cc1eb2af3586a38a7e75036638bd8c4e12f331da042be46a37d658723cd75088f1d9c4152e4ba54d65dcf56623556b22730206959792726b5285c9af88a8b7629403155797e703d036cb3ba8c037f7c3cadb669ca49e402a216b793d35259a533f809835b3b1f9095a5fd7e392537deefd5bc128ca71d853be42a56d5300ff4fe8633d41ea22733a37d3b0945c104cde438d359c669fffc6718144d861a8a73bab47bcf43f2087cfedd4cde15f8fba581184fcd9f2e850e22776c941ef09c9938426790131ac3ded24e5cda53c59d16feeefed4d2fdf5717edb79581ffe417fee730a5038f73b52c593e0f89bb090d4a55b23b54477b9c45fdef36abe58f2d030515cd6344836458f7a93af9f01ada53ecd03f0a5faf11079ab7b5e6e3d1421aabe1f16c8abacafb8b05b622fca2fb07ad3b186d59b66f6eb2fe386e9cf33c4a56da285a9e28a8c83e8c08791b2dc72cb17d1c7f0170f01", @ANYRES64]], 0x1, 0x1) syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) fcntl$addseals(r6, 0x409, 0x4) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[]}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) lseek(r7, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) statfs(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000340)=""/36) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(r1, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x3100082, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) 12:40:43 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 2950.501454][T32616] input: syz0 as /devices/virtual/input/input575 12:40:43 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:43 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020014000200000000000000000000010500060020000000566e51ba21995a90000500e50000070000001f00000000000003000000000000020001000000000cb200000000020000000005000500000000000a00000000000000ff170000000000000000000000000017000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x8000000000000f1, 0x0) 12:40:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x29, 0x0, &(0x7f0000000240)) [ 2950.935192][ T477] input: syz0 as /devices/virtual/input/input576 12:40:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2953.090183][ C1] net_ratelimit: 16 callbacks suppressed [ 2953.090200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2953.101765][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2953.570134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2953.576070][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2953.970151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2953.976045][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2954.210132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2954.216005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2954.770142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2954.775908][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:40:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:40:49 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffda0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup(r3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000001400)={0xd4, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x82ec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x2000) ioctl$int_in(r4, 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000001540)=0x1ff) fsetxattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='osga_arbiter\x00'], &(0x7f00000001c0)='posix_acl_accessem0\xfa\x00', 0x15, 0x1) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) 12:40:49 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) fcntl$setstatus(r1, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x102, 0x9032, 0xffffffffffffffff, 0x0) 12:40:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:50 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 2956.857875][ T502] input: syz0 as /devices/virtual/input/input577 12:40:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:40:50 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40043b663d56b445, 0x402c011, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:40:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) fcntl$setstatus(r1, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x102, 0x9032, 0xffffffffffffffff, 0x0) [ 2957.221372][ T717] input: syz0 as /devices/virtual/input/input578 [ 2957.567222][ T729] debugfs: File '724' in directory 'proc' already present! [ 2958.130157][ C1] net_ratelimit: 14 callbacks suppressed [ 2958.135970][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.141755][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.370123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.375939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.930136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.935953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2959.330123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2959.335918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2959.810119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2959.815904][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:40:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:40:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:56 executing program 2: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 12:40:56 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:56 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x30, &(0x7f0000002f80)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 12:40:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000100)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r2}, {r1, 0x1301}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 12:40:56 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x40) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000400)={'nat\x00'}, 0x0) r1 = creat(&(0x7f0000000500)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x17) socket$unix(0x1, 0x1, 0x0) lseek(r1, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000}) write$P9_RGETLOCK(r3, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x2) lseek(r3, 0x0, 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40b4938785df3185, 0x0) 12:40:56 executing program 2: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 12:40:56 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:40:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:40:56 executing program 0: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x213) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) [ 2963.490094][ C1] net_ratelimit: 16 callbacks suppressed [ 2963.490109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2963.501617][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:40:56 executing program 2: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 2963.970133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2963.975965][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.370099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2964.376041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.610126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2964.615911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2965.170168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2965.175991][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2968.530133][ C1] net_ratelimit: 14 callbacks suppressed [ 2968.530149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2968.541672][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2968.780126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2968.785962][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2969.330128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.336082][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:41:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000140)='D'}) r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}, {r2, 0x104}], 0x2, 0x0, 0x0, 0x0) 12:41:02 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:41:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) 12:41:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:02 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:41:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001480)) [ 2969.730101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2969.735919][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:02 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) [ 2970.210100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.215900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2973.890132][ C1] net_ratelimit: 16 callbacks suppressed [ 2973.890147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2973.901786][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2974.370153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2974.375925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2974.770110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2974.775888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.010159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.016065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2975.570133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2975.575912][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:41:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:11 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:41:11 executing program 4: rt_sigaction(0x26, 0x0, &(0x7f0000000400)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000480)) 12:41:11 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000003800)) 12:41:12 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) 12:41:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2978.930105][ C1] net_ratelimit: 14 callbacks suppressed [ 2978.930122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2978.941615][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:12 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:41:12 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2979.180086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2979.185890][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2979.740122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2979.745903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2980.130136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2980.135946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2980.610114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2980.615991][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2984.290151][ C1] net_ratelimit: 16 callbacks suppressed [ 2984.290166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2984.301808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2984.770146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2984.776021][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2985.170106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.175915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2985.410142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.415931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2985.970163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.975929][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:41:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) 12:41:20 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:20 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) 12:41:20 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, 0x0, &(0x7f0000937000), 0x0) 12:41:20 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:20 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:20 executing program 4: clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2987.598453][ T1821] input: syz0 as /devices/virtual/input/input582 12:41:20 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, 0x0, &(0x7f0000937000), 0x0) [ 2987.749473][ T1828] IPVS: ftp: loaded support on port[0] = 21 [ 2987.996710][ T1828] IPVS: ftp: loaded support on port[0] = 21 [ 2989.330095][ C1] net_ratelimit: 14 callbacks suppressed [ 2989.330105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.341678][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.570121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.575938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2990.130176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2990.135995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2990.530125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2990.535933][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2991.010133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2991.016060][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:41:24 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) 12:41:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:24 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:24 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:24 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, 0x0, &(0x7f0000937000), 0x0) 12:41:24 executing program 4: clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2991.530453][ T1852] input: syz0 as /devices/virtual/input/input583 [ 2991.553181][ T1851] IPVS: ftp: loaded support on port[0] = 21 12:41:24 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, 0x0, 0x0) 12:41:24 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2991.976462][ T1867] input: syz0 as /devices/virtual/input/input584 12:41:25 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:25 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:25 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1000000000e6) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr="6f3829d7da47d9bb345810ed11c63d35", 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 2994.690147][ C1] net_ratelimit: 16 callbacks suppressed [ 2994.695975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2994.701736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.170135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.175927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.570126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.576977][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:28 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) 12:41:28 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, 0x0, 0x0) 12:41:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:28 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:28 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="00fffffffff9c5881456f629458d88ab0b35b917a17490cb73a62d39cdc121054746e9acfbcd0e9aef1c"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) [ 2995.802809][ T2006] input: syz0 as /devices/virtual/input/input585 [ 2995.810086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.815881][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:29 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f00000000c0)="260000002200476baacdddf260d85f660005006d20002b00000031c96aee719251b3e4d427c9", 0x26) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:41:29 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x72, 0x4) accept4$unix(r1, &(0x7f000046f000)=@abs, 0x0, 0x0) 12:41:29 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:29 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:29 executing program 4: write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f48", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) [ 2996.238080][ T2211] input: syz0 as /devices/virtual/input/input586 [ 2996.370092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.375912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2999.730125][ C1] net_ratelimit: 14 callbacks suppressed [ 2999.730138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2999.741603][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2999.970125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2999.975907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.530147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.535908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3000.930139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3000.935922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.410158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.415944][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:41:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:41:35 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr="6f3829d7da47d9bb345810ed11c63d35", 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 12:41:35 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}, 0x0) [ 3002.101479][ T2326] input: syz0 as /devices/virtual/input/input587 12:41:35 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@rand_addr="6f3829d7da47d9bb345810ed11c63d35", 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 12:41:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x404, 0x1, 0x1, "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"}], 0x404}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 12:41:35 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:35 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3005.090138][ C1] net_ratelimit: 16 callbacks suppressed [ 3005.090150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3005.101624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3005.570151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3005.575975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3005.970135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3005.977746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.210133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.216162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.770129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3006.776111][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:41:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:41 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:41 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12fa0d) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window, @window, @sack_perm, @window, @sack_perm, @window, @window, @sack_perm], 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) 12:41:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:41 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:41 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) [ 3010.130120][ C1] net_ratelimit: 14 callbacks suppressed [ 3010.130130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3010.141736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3010.370135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3010.376270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3010.930153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3010.936207][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3011.330144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3011.336100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3011.810152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3011.815957][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:41:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, &(0x7f0000000000)) 12:41:45 executing program 5: creat(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) poll(&(0x7f00000004c0)=[{r1}], 0x1, 0xa4) r2 = syz_open_pts(r1, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r2, r1, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = gettid() tkill(0x0, 0x25) ptrace$setsig(0x4203, r5, 0x80000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="e28e5774e196350cd656e4a62c07c6778f861af9bbef00622e2148fabcb3eaa79e702193d3cc83f12db4d2ff3b9f9db5547dd09e1c42cc1360aedbd29baca221bf3888f0ea033c1c8dadc96963f0bce3c10afe2dea51", @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX], @ANYRES16=r6, @ANYRESHEX=r0, @ANYRES16=r7], @ANYRESDEC=r8], &(0x7f00000000c0)=""/28, 0x1c) r9 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x3, 0x100, @dev, 0x8004}, 0x1c) 12:41:45 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:45 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:45 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r1, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:41:45 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000240)=0x1bb) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 12:41:46 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 3015.490185][ C1] net_ratelimit: 16 callbacks suppressed [ 3015.496467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3015.502208][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3015.970172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3015.976237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3016.370147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3016.375909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3016.610120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3016.615888][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:49 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) 12:41:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:49 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 12:41:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000240)=0x1bb) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 12:41:49 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:50 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 12:41:50 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:50 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3017.170109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3017.175918][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:41:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:41:50 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001c00)='.\x00', 0xfe) r2 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r2, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)="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", 0x7de}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000100030006000000000000000000e00000010000000000000000026b01000000007f0000321356301079f5a6ba82000b050000000300000000000000020000af830b"], 0x50}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x8000200b}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@isdn={0x22, 0xb4, 0xf7, 0x73, 0x1}, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000c00160000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, 0x0, 0x2be}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3020.530158][ C1] net_ratelimit: 14 callbacks suppressed [ 3020.535859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3020.541631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3020.770096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3020.775890][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3021.330135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3021.335944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3021.730122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3021.736060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3022.210122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3022.215896][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:41:56 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) 12:41:56 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:56 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:41:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f00000004c0)='syst\xe4\xdea\xb7\xdb}\x13\xfa\xa6\x11e\x00\x00\xd4\\\x01\xfa\x00\x04acl_~=\x8c\xe0\xf8\xd2B\xaa<\x86P\xc7\x89\x8b\xfc\xd3\xa4\xcf@\xf5C\x11\xe5\xa36h8>\xc88E\x05\xb1\xab\xe0\v\xe3\xc9_\xb0\x81\\y\xe4\xfc\xcc\n9\xa7\x03\xc5\x9d\xa7\xc3\xb7\xeb\xa89\x00#<\xe3\xbc*H\xf0v?\xe7\xbf\x91\x06S\xa7\xc4xC\x8aU \x95\xe9\xce\xe6\x10|\xcc\xc0\x8c&\xa6\x9b\x12\xbd\xd7J\x80\xfftZ\xa8\xcc\xc0\xcd\xf8x\\\xb6!\xf1\xed\xc0M\xd3E@q?\xd0\x1a\xc4\'\xbf\xc9\x97\xd3\xe3\xd0\x85\x95w2\xb3\x06\xbdWb#pO\xe9\xcc\xa9\x83?\xcf\x7ft\xc4\xea\xcd\xb3\x13\xf9\x00G\xc3R\xf9\xe5\xc1d\xaf\x86\xe6\v\xa9cq\xaf\xeaV\x14\xba\x1f#\xcf\xc1\xfb\x83;\x84\xff\xdd+\xdd\x8f\xe0\r\x93\x88\x81h\xf4\xc5\x92\xec\vd\nG]\xd74\a\xd4\xb3\n\xaf0\xef\x83iZ^\xb1\xf7\xb3\xd5\r\xa2\xf7USYa]\xd7\xcfb\xb15\xa3+\xa6\xfa\xf2~\xbc\x1f\x9f\x8de\x10\xca\x144\xa4\x12B\xb7N\xb5z\xad\xc8mJ\xaab$\xe7\x19\xf5\xfe\xac\xc0\x9c9\x7f\x1f\xe4\xe7\x0e/\xdc\xcd\xc3\xd5\x91}tbu\x01', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) ftruncate(r0, 0x0) 12:41:56 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:41:56 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:56 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:41:56 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:41:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:41:56 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:41:56 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3025.890124][ C1] net_ratelimit: 16 callbacks suppressed [ 3025.890137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3025.901581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.370109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.375932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.770102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.775923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.010130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.015952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.570125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.575927][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:02 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)) 12:42:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:02 executing program 4: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:42:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:02 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:42:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:02 executing program 4: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) 12:42:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:03 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:03 executing program 4: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9, 0x81}, 0x1c) [ 3030.930120][ C1] net_ratelimit: 14 callbacks suppressed [ 3030.935857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3030.941602][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3031.170152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.175924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3031.730140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3031.735954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3032.130118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3032.135876][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3032.610141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3032.616069][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:42:08 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 12:42:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:08 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, 0x0) 12:42:08 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:42:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 12:42:09 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:09 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 12:42:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x9, 0x81}, 0x1c) [ 3036.300143][ C1] net_ratelimit: 16 callbacks suppressed [ 3036.300159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.311626][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:09 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:09 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) [ 3036.770115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3036.775920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.170113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.175879][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.410101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.415895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3037.970151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3037.975946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3041.330158][ C1] net_ratelimit: 14 callbacks suppressed [ 3041.330172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3041.341791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3041.570130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3041.575905][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, 0x0) 12:42:15 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x9, 0x81}, 0x1c) 12:42:15 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:15 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) [ 3042.130131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3042.135948][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:15 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:15 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x9, 0x81}, 0x1c) 12:42:15 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:15 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) [ 3042.530125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3042.535963][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3043.010128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3043.015969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3046.690113][ C1] net_ratelimit: 16 callbacks suppressed [ 3046.695782][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3046.701527][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3047.180102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.185893][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:42:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x402c542c, 0x0) 12:42:20 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:20 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x0, 0x81}, 0x1c) 12:42:20 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_elf32(r0, 0x0, 0x0) 12:42:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_elf32(r0, 0x0, 0x0) 12:42:20 executing program 0: r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:20 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:20 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x0, 0x81}, 0x1c) [ 3047.580094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.585906][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_elf32(r0, 0x0, 0x0) [ 3047.810166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3047.815975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3048.370133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3048.375935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.730084][ C1] net_ratelimit: 14 callbacks suppressed [ 3051.730093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.741534][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.970137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.975898][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3052.530128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3052.535903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3052.930110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3052.935922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3053.410140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3053.415980][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:42:26 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:26 executing program 0: r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:26 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:26 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x0, 0x81}, 0x1c) 12:42:26 executing program 5: exit(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 12:42:26 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00'}, 0x118) 12:42:27 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:27 executing program 0: r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:27 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9}, 0x1c) 12:42:27 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00'}) 12:42:27 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:27 executing program 0: r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 12:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9}, 0x1c) [ 3054.442376][ T3926] binder: 3919:3926 ioctl c0306201 0 returned -14 12:42:27 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:27 executing program 5: exit(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) [ 3057.090132][ C1] net_ratelimit: 16 callbacks suppressed [ 3057.095820][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.101595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3057.570160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.576098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3057.970112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.975873][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.210117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.215877][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.770127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.775892][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:33 executing program 3: socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) 12:42:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 12:42:33 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x9}, 0x1c) 12:42:33 executing program 0: r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:33 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:33 executing program 5: exit(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) [ 3060.075506][ T4039] binder: 4038:4039 ioctl c0306201 0 returned -14 12:42:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 12:42:33 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:33 executing program 0: r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3060.291929][ T4153] binder: 4152:4153 ioctl c0306201 0 returned -14 12:42:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:33 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3062.130176][ C1] net_ratelimit: 14 callbacks suppressed [ 3062.135870][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.141655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3062.370139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.375980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3062.930146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3062.935932][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3063.330144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3063.335930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3063.810126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3063.815887][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:42:39 executing program 3: socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) 12:42:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:39 executing program 0: r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:39 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:42:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:39 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:39 executing program 0: r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 12:42:40 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3067.490113][ C1] net_ratelimit: 16 callbacks suppressed [ 3067.490131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.501551][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3067.970128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3067.975902][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3068.370100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3068.375901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3068.610139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3068.615954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.170121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.175918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3072.530127][ C1] net_ratelimit: 14 callbacks suppressed [ 3072.530136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3072.541535][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3072.770135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3072.775907][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:45 executing program 3: socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_emit_ethernet(0xc0, &(0x7f0000000000)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @remote, @random="1db9299382cd", @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x0) 12:42:45 executing program 0: r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 12:42:45 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:45 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:42:46 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 12:42:46 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f00000000c0)) 12:42:46 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3073.330104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.335962][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3073.730113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.735902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3074.210122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3074.216719][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3077.890137][ C1] net_ratelimit: 16 callbacks suppressed [ 3077.890146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3077.901601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.370149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.375958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.770124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3078.775890][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.010103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.015907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.580121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.585889][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:42:54 executing program 3: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 12:42:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) link(0x0, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 12:42:54 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 12:42:54 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:42:54 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, 0x0) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:42:54 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xffffffffffffff8f) pipe(&(0x7f0000000080)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000500), 0x3528acda}], 0x20000000000002d7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') pwritev(r2, &(0x7f0000001400), 0x31f, 0x0) 12:42:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 12:42:54 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:42:55 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3082.930145][ C1] net_ratelimit: 14 callbacks suppressed [ 3082.935838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3082.941644][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3083.170120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3083.175877][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3083.730135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3083.735908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3084.130116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.135917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3084.610125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.615915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3088.290134][ C1] net_ratelimit: 16 callbacks suppressed [ 3088.290143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3088.301767][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:43:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 12:43:01 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffe94) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x5) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, 0x0, 0x8000fffffffe) accept4$unix(r4, 0x0, &(0x7f0000000e80)=0xfd28, 0x800) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="105cdcf349fa12aad7d7a2d2403368a108384df8c0de42cd03275426bf0eefd2b449207a41aa33a9515d59af6c80b7ab0bd4c171f2929da76348cf6713350c4885e2fdac65f6b2831d436aadcdcd6bd3e0a05818f1423c3f174fcabcbb1bad600d9be4b60a631cfdee05896b83a411db74b68969c5857fe914905b0000000000000000000000000000255ca01bf6ec65a1c8b482d5256c769d2fdf43daca07c523b4b36216fdb57d97baea13f2d00e07086033ac401e6ecf89fd981b3a65b09dba9cdd5f632ed9ffe38558c10f77619f90082d6c3d84f095b82ef9bb56fb55eadd52cb562632617fa2cfad655e58646a78095712c7adbef9db8959d0bcaa31e50a72d4db0500"/271], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffffffffffebe) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:43:01 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:43:01 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffda0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup(0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000001400)={0xd4, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x82ec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x2000) ioctl$int_in(r1, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000001540)=0x1ff) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='posix_acl_accessem0\xfa\x00', 0x15, 0x1) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) 12:43:01 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 12:43:01 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 12:43:01 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) [ 3088.770112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3088.775974][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:43:02 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000704ab092506090007000aab08000600000002002593210001", 0x1f) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfec1) pipe(0x0) 12:43:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:43:02 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, 0x0, 0x0) 12:43:02 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000008dc0)='./file1\x00') lseek(r0, 0x0, 0x1) [ 3089.170104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.175946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.410116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.415909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.970143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.975930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3092.921769][ T25] audit: type=1804 audit(1571920986.067:4736): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir263056107/syzkaller.BWk6vm/2581/bus" dev="sda1" ino=16601 res=1 [ 3092.932206][ T5254] IPVS: ftp: loaded support on port[0] = 21 [ 3093.340114][ C1] net_ratelimit: 14 callbacks suppressed [ 3093.340131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3093.351622][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3093.570085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3093.575854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.140116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.146012][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.530108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.536012][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.010201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.016027][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:43:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, 0x0, 0x0, 0x10, 0x0, 0x0) 12:43:09 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 12:43:09 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 12:43:09 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) process_vm_readv(r0, &(0x7f0000001540)=[{&(0x7f0000000040)=""/169, 0xa9}, {&(0x7f0000000100)=""/246, 0xf6}], 0x2, &(0x7f0000001840)=[{&(0x7f0000001600)=""/126, 0x7e}, {&(0x7f0000001680)=""/154, 0x9a}, {&(0x7f0000001740)=""/15, 0xf}], 0x3, 0x0) 12:43:09 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, 0x0, 0x0, 0x10, 0x0, 0x0) 12:43:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:09 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 12:43:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, 0x0, 0x0, 0x10, 0x0, 0x0) 12:43:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:09 executing program 2: timer_create(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/159, 0x9f}], 0x2) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x0) 12:43:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac), 0x0, 0x10, 0x0, 0x0) 12:43:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3096.534145][ T5402] hid-generic 0000:0000:0000.00B7: ignoring exceeding usage max [ 3096.594646][ T5402] hid-generic 0000:0000:0000.00B7: hidraw0: HID v0.00 Device [syz1] on sz1 12:43:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x100000000000011, 0x2, 0x81) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x87ffd) sendfile(r0, r2, 0x0, 0x800000000021) 12:43:10 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) [ 3098.690150][ C1] net_ratelimit: 16 callbacks suppressed [ 3098.690160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3098.701579][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3099.170160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3099.176019][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3099.570139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3099.576071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3099.810128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3099.816024][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.370124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.375891][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:43:14 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac), 0x0, 0x10, 0x0, 0x0) 12:43:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000100)=""/11, 0xb, &(0x7f00000002c0)={&(0x7f00000001c0)={'sha224-ssse3\x00'}, &(0x7f0000000240)="f7df8c4f6a6082ff0c23057d2c453ed30c593164cf1c608cd65c0021dadbe1b171e100b9a24382a42d44dfefc51e0fa71d53430b08c63b69825df777739c55422c45ffde766c74eb443bbac2a6f6fa7e4987f752ff4353042e03d071644b", 0x5e}) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) openat$null(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r6 = getpid() sched_setattr(r6, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32, @ANYBLOB="02", @ANYRES32, @ANYBLOB="02", @ANYRES32=r9, @ANYBLOB="040004000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="10000200000000002000d2ee0000"], 0xc, 0xd06a914801326d70) fstat(r3, &(0x7f0000000e80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f00), &(0x7f0000000f40)=0xc) r11 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r11, &(0x7f00000003c0)=ANY=[], 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r11, r12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r13, 0x0) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r15, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) getgroups(0x8, &(0x7f00000001c0)=[0xee01, r19, r21, 0x0, 0xee00, 0xee00, 0xee00, 0xee01]) r23 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4, 0x2, [@tunl_policy]}}}]}, 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0200000001000200", @ANYPTR64, @ANYRES32=r16, @ANYBLOB="0400040000000000080002", @ANYRES32=r17, @ANYBLOB="d38157859ecc61e6ecf37670313b0200c268249932b3909f29", @ANYRES32=r22], 0x7, 0xd06a914801326d70) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r25) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getgroups(0x0, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 12:43:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, &(0x7f0000000140), 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000140), 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4}, &(0x7f0000000100)=""/11, 0xb, &(0x7f00000002c0)={&(0x7f00000001c0)={'sha224-ssse3\x00'}, &(0x7f0000000240)}) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) openat$null(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/null\x00', 0x0, 0x0) r6 = getpid() sched_setattr(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getgroups(0x9, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, 0x0, r12, 0xee00, 0xee00, 0xee00, 0xee01]) fstat(r3, &(0x7f0000000e80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f00), 0x0) r13 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r13, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) r14 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r13, r14) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r16, 0x0) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r18, 0x0) r19 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r20, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r22) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) getsockname$packet(r26, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="0200000001000200", @ANYRES32=r23, @ANYBLOB="02000700", @ANYRES32=r18, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES64=r25], @ANYRES32=r20, @ANYBLOB="040004000000000008", @ANYRES32, @ANYBLOB="d38157859ecc61e6ecf37670313b0200c268249932b3909f295c613c35", @ANYRES32=r21, @ANYBLOB, @ANYRES32], 0xc, 0xd06a914801326d70) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getgroups(0x7, &(0x7f00000001c0)=[0xee01, 0x0, 0x0, r28, 0xee00, 0xee00, 0xee01]) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 12:43:14 executing program 5: write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000705ab092506090007000aab08000300000002002593210001c000000000000000000000070000039815fa2c1ec28656aaa79bb9d95662070000bc000c00f0036c6c256f1a272fdf0d11512fd633d640007a01007a8934d07302ade01720d3d5bbc91a3e2e009bb4ea74bc2c8de280fc83ab82f605f70cec18444eb29d3ef3d92c83170e5bba4a46143ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dffff10ded6dfd19cd27b45304dc30083df150c3b880f7f0046a60467b4d57155870258a10000c880ac801fe4af3d0041", 0xe3) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x14, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:43:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac), 0x0, 0x10, 0x0, 0x0) 12:43:14 executing program 5: clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet(0x2, 0x4, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, 0x180) 12:43:14 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0xffffffffffffff4f) 12:43:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x0, 0x0, 0x0) 12:43:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) [ 3103.730139][ C1] net_ratelimit: 14 callbacks suppressed [ 3103.735831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3103.741597][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3103.970137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3103.975958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3104.530152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3104.535938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3104.930121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3104.935888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3105.410100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.415881][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:43:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = gettid() sched_setparam(r1, &(0x7f0000000040)=0x26) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) getrusage(0x0, &(0x7f0000000240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f00000003c0)=0xfff) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x4, 0x8}, @window={0x3, 0xffffffff, 0x1ff}], 0x2) r6 = dup(r0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) 12:43:21 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x0, 0x0, 0x0) 12:43:21 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 12:43:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) [ 3108.676441][ T6074] input: syz1 as /devices/virtual/input/input597 12:43:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:21 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x0, 0x0, 0x0) 12:43:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:22 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x8000000000000d8, 0x0) 12:43:22 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) [ 3109.090084][ C1] net_ratelimit: 16 callbacks suppressed [ 3109.090099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3109.101623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3109.570118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3109.575877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3109.970128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3109.975962][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.210118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.215921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.770184][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.775958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.130085][ C1] net_ratelimit: 14 callbacks suppressed [ 3114.135789][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.141514][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.370124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.376002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.857421][ T6317] input: syz1 as /devices/virtual/input/input599 [ 3114.930108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.935872][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3115.330135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.335944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3115.810148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.816026][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0/../file0/file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\xe0\x83\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0252ab99065c84c3ef7a4fd40c2bb1e86da41aad20425f80aba2d5557375939379594fb475c76cb976e2a5006b7923485a5462031939812d7357fd847dcd48fcd24f7f054321680674da1b40d3f9083cb179bd8881234abb7e450ab636a10bcebda41054c5a0b67590c8ef30a8941c150000ab858dcc158bf11ef03620eff91eaea551704c1ced58ebd180718c2e401f7c501c9868346c7103bb2d20aa20d31b91530bca278d86a2ef777a920915b2bf41c4e6821dfb29aa3c4a27bcd7ad06e3e17ee01cdecfbb38e1003757f52ff65c1a03e1806439615b770cbda3088c60021d069c6862eccbf0c4165c"], 0x1, 0x3) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="03020100000100200002c081913e760c2477c3b01f4f587f0b0277b1fa70d38ca25b98ec641d73435f1af5f80da8ec325848057c468c0c68ba6b494601870b3f848bca953d09ff01bcf5d1e2091cc0a121280fa4bc2a000000b8498235d98d1e5d6f979c78d6add0de3170a4bbf5de6a0741ae587917827a7725d9ccb357878812d3fab9e2b71469538b04c6a4afdba3afbb364474617c9009129c9be626fa38fa"], 0xc, 0x1) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x208002, 0x24) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000400)=0x101) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x82) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40a8111, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x11200, 0x0) recvfrom$unix(r3, &(0x7f0000000680)=""/72, 0xfcf0, 0x10000, &(0x7f0000000700)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0xfffffffffffffddb) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r4 = eventfd2(0x0, 0x800) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000380)=0x3f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c9c380}) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x80000000002) 12:43:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:29 executing program 1: r0 = socket(0x4000e, 0x0, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'veth0_to_team\x00', 0x1}, 0x65d2710472a2b326) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8_\xfd`\xd2\x1f\xaf\x1c! ') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, [@multicast2, @multicast1, @remote, @empty]}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x0, 0x104}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x6) sendmmsg$unix(r4, &(0x7f00000bd000), 0x92492492492493a, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002000)=[{&(0x7f00000003c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c262569250008000c000000000000a3c728f1c46b7b31afdc1338d54400009b0400000000000000", 0xfffffe2b}], 0x2000012b, 0x0, 0xe3}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2801) ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r8]) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x400000000000) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r7, 0x0) ftruncate(r6, 0x6) ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f0000000340)) 12:43:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:29 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) 12:43:29 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) [ 3116.303785][ T25] audit: type=1326 audit(1571921009.447:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6447 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd3a code=0xffff0000 [ 3116.310270][ T6480] 9pnet: Insufficient options for proto=fd [ 3116.356407][ T25] audit: type=1326 audit(1571921009.477:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6447 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45cd3a code=0x0 12:43:29 executing program 1: r0 = socket(0x4000e, 0x0, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'veth0_to_team\x00', 0x1}, 0x65d2710472a2b326) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8_\xfd`\xd2\x1f\xaf\x1c! ') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, [@multicast2, @multicast1, @remote, @empty]}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3, 0x0, 0x104}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x6) sendmmsg$unix(r4, &(0x7f00000bd000), 0x92492492492493a, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002000)=[{&(0x7f00000003c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c262569250008000c000000000000a3c728f1c46b7b31afdc1338d54400009b0400000000000000", 0xfffffe2b}], 0x2000012b, 0x0, 0xe3}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2801) ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r8]) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x400000000000) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044014) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r7, 0x0) ftruncate(r6, 0x6) ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f0000000340)) 12:43:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3116.566477][ T6653] 9pnet: Insufficient options for proto=fd 12:43:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3116.721851][ T6659] 9pnet: Insufficient options for proto=fd [ 3117.069299][ T25] audit: type=1326 audit(1571921010.207:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6447 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd3a code=0xffff0000 [ 3117.113902][ T25] audit: type=1326 audit(1571921010.257:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6447 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45cd3a code=0x0 [ 3119.490143][ C1] net_ratelimit: 16 callbacks suppressed [ 3119.495942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3119.501687][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3119.970138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3119.975991][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.370118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.376167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.620104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.625894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3121.170134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3121.175940][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:43:35 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:35 executing program 1: r0 = epoll_create(0x4) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)='5', 0x1}], 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 12:43:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0/../file0/file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\xe0\x83\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0252ab99065c84c3ef7a4fd40c2bb1e86da41aad20425f80aba2d5557375939379594fb475c76cb976e2a5006b7923485a5462031939812d7357fd847dcd48fcd24f7f054321680674da1b40d3f9083cb179bd8881234abb7e450ab636a10bcebda41054c5a0b67590c8ef30a8941c150000ab858dcc158bf11ef03620eff91eaea551704c1ced58ebd180718c2e401f7c501c9868346c7103bb2d20aa20d31b91530bca278d86a2ef777a920915b2bf41c4e6821dfb29aa3c4a27bcd7ad06e3e17ee01cdecfbb38e1003757f52ff65c1a03e1806439615b770cbda3088c60021d069c6862eccbf0c4165c"], 0x1, 0x3) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="03020100000100200002c081913e760c2477c3b01f4f587f0b0277b1fa70d38ca25b98ec641d73435f1af5f80da8ec325848057c468c0c68ba6b494601870b3f848bca953d09ff01bcf5d1e2091cc0a121280fa4bc2a000000b8498235d98d1e5d6f979c78d6add0de3170a4bbf5de6a0741ae587917827a7725d9ccb357878812d3fab9e2b71469538b04c6a4afdba3afbb364474617c9009129c9be626fa38fa"], 0xc, 0x1) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x208002, 0x24) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000400)=0x101) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x82) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40a8111, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x11200, 0x0) recvfrom$unix(r3, &(0x7f0000000680)=""/72, 0xfcf0, 0x10000, &(0x7f0000000700)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0xfffffffffffffddb) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r4 = eventfd2(0x0, 0x800) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000380)=0x3f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c9c380}) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x80000000002) 12:43:35 executing program 5: setrlimit(0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x18032, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000140)) 12:43:35 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0/../file0/file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\xe0\x83\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0252ab99065c84c3ef7a4fd40c2bb1e86da41aad20425f80aba2d5557375939379594fb475c76cb976e2a5006b7923485a5462031939812d7357fd847dcd48fcd24f7f054321680674da1b40d3f9083cb179bd8881234abb7e450ab636a10bcebda41054c5a0b67590c8ef30a8941c150000ab858dcc158bf11ef03620eff91eaea551704c1ced58ebd180718c2e401f7c501c9868346c7103bb2d20aa20d31b91530bca278d86a2ef777a920915b2bf41c4e6821dfb29aa3c4a27bcd7ad06e3e17ee01cdecfbb38e1003757f52ff65c1a03e1806439615b770cbda3088c60021d069c6862eccbf0c4165c"], 0x1, 0x3) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="03020100000100200002c081913e760c2477c3b01f4f587f0b0277b1fa70d38ca25b98ec641d73435f1af5f80da8ec325848057c468c0c68ba6b494601870b3f848bca953d09ff01bcf5d1e2091cc0a121280fa4bc2a000000b8498235d98d1e5d6f979c78d6add0de3170a4bbf5de6a0741ae587917827a7725d9ccb357878812d3fab9e2b71469538b04c6a4afdba3afbb364474617c9009129c9be626fa38fa"], 0xc, 0x1) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x208002, 0x24) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000400)=0x101) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x82) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40a8111, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x11200, 0x0) recvfrom$unix(r3, &(0x7f0000000680)=""/72, 0xfcf0, 0x10000, &(0x7f0000000700)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0xfffffffffffffddb) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r4 = eventfd2(0x0, 0x800) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000380)=0x3f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c9c380}) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x80000000002) 12:43:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x143000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000001380)) close(r1) 12:43:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xff7ffffffffffffb) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x802fffffff8}, 0x9bd3e5fafdb2fa71) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000380)=""/171, 0x6}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000005c0)={0xfffffffffffffdf5}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x8003, 0x12) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x379}, 0xfffffffffffffff8) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x4e20, 0x0, @mcast2}, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x5c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x100000000000010) fcntl$setstatus(r5, 0x4, 0x1000060fe) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) open(&(0x7f0000000000)='./bus\x00', 0x900, 0xffffffffffffffff) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x40600, 0x0) r6 = getpid() sched_setscheduler(r6, 0x3, 0x0) clone(0x10000000, &(0x7f00000006c0)="4912cab8e1d0a0d47cd6a6992d9f269f4cafc5e49daf280dfec7dbb4f7f8e639d68710e133ddeb89b837294372f7048fde91b99633ac9da4733dda5093caae8ed3f599d141b5a88c481d260652430d582447b4e3857c2c9077bdd5948b10ee7584082e45660adb221625500954c898c1266263183a8bf2f2180cccced54893357148cadf639cc6540cf6ca1f034e8e032edac9", 0x0, 0x0, 0x0) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000180), 0x401ffffffe) socket$unix(0x1, 0x3, 0x0) lseek(r3, 0x0, 0x4) 12:43:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) [ 3122.913970][ T7022] 9pnet: Insufficient options for proto=fd 12:43:36 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000003c0)="00d6968d221203000000000000000003000000b0", 0x14) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 12:43:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffe1d) recvmmsg(r1, &(0x7f0000000000), 0x8000000000002f5, 0x0, 0x0) 12:43:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) [ 3123.282867][ T7031] 9pnet: Insufficient options for proto=fd [ 3124.530153][ C1] net_ratelimit: 14 callbacks suppressed [ 3124.535898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3124.541788][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3124.770138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3124.776078][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.330188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.335985][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3125.730164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3125.735995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.210153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.215940][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3129.890104][ C1] net_ratelimit: 16 callbacks suppressed [ 3129.890120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3129.901664][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3130.370102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3130.375889][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:43:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 12:43:43 executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f0000000140)={0x67446698, 0x0, 0x4, 0x0, 0x3, "209f52afe9e4cfd07b5cf8cd9762139bcddff5f587b6fb484996f6422d573e425b4c86052d14f331c3f0a4876f8551712fe7d41993e1fd2543a3b8d52a858e4d627caf3a87a5e1b50d3be5d855cd04a27a34762d68a708d920303218ef1a4922d54c097002137e225e"}, 0x79) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(0x0) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 12:43:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:43 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0/../file0/file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\xe0\x83\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0252ab99065c84c3ef7a4fd40c2bb1e86da41aad20425f80aba2d5557375939379594fb475c76cb976e2a5006b7923485a5462031939812d7357fd847dcd48fcd24f7f054321680674da1b40d3f9083cb179bd8881234abb7e450ab636a10bcebda41054c5a0b67590c8ef30a8941c150000ab858dcc158bf11ef03620eff91eaea551704c1ced58ebd180718c2e401f7c501c9868346c7103bb2d20aa20d31b91530bca278d86a2ef777a920915b2bf41c4e6821dfb29aa3c4a27bcd7ad06e3e17ee01cdecfbb38e1003757f52ff65c1a03e1806439615b770cbda3088c60021d069c6862eccbf0c4165c"], 0x1, 0x3) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="03020100000100200002c081913e760c2477c3b01f4f587f0b0277b1fa70d38ca25b98ec641d73435f1af5f80da8ec325848057c468c0c68ba6b494601870b3f848bca953d09ff01bcf5d1e2091cc0a121280fa4bc2a000000b8498235d98d1e5d6f979c78d6add0de3170a4bbf5de6a0741ae587917827a7725d9ccb357878812d3fab9e2b71469538b04c6a4afdba3afbb364474617c9009129c9be626fa38fa"], 0xc, 0x1) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x208002, 0x24) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000400)=0x101) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x82) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40a8111, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x11200, 0x0) recvfrom$unix(r3, &(0x7f0000000680)=""/72, 0xfcf0, 0x10000, &(0x7f0000000700)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0xfffffffffffffddb) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r4 = eventfd2(0x0, 0x800) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000380)=0x3f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c9c380}) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x80000000002) 12:43:43 executing program 5: syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) getpgrp(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) pipe(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x5d, 0xed, &(0x7f0000000400)=""/4096, &(0x7f0000000100)=0x1000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x4000e, 0x8000000000004, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:43:43 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3130.770089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3130.775893][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:43:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3130.844660][ T7158] 9pnet: Insufficient options for proto=fd [ 3131.010084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.016067][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:43:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:44 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x1000000000011, &(0x7f0000000180), 0x0, 0x0, 0x0) getpid() waitid(0x0, 0x0, 0x0, 0x401000004, 0x0) waitid(0x0, 0x0, 0x0, 0x100000b, 0x0) 12:43:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3131.412125][ T7310] ptrace attach of "/root/syz-executor.5"[7560] was attempted by "/root/syz-executor.5"[7310] 12:43:44 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x1000000000011, &(0x7f0000000180), 0x0, 0x0, 0x0) getpid() waitid(0x0, 0x0, 0x0, 0x401000004, 0x0) waitid(0x0, 0x0, 0x0, 0x100000b, 0x0) [ 3131.570081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.575857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.646290][ T7416] ptrace attach of "/root/syz-executor.5"[7560] was attempted by "/root/syz-executor.5"[7416] [ 3134.930139][ C1] net_ratelimit: 14 callbacks suppressed [ 3134.930154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3134.941620][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3135.170118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3135.175961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3135.730132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3135.735903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.130149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.135954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.610140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.615951][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:43:50 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0/../file0/file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\xe0\x83\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0252ab99065c84c3ef7a4fd40c2bb1e86da41aad20425f80aba2d5557375939379594fb475c76cb976e2a5006b7923485a5462031939812d7357fd847dcd48fcd24f7f054321680674da1b40d3f9083cb179bd8881234abb7e450ab636a10bcebda41054c5a0b67590c8ef30a8941c150000ab858dcc158bf11ef03620eff91eaea551704c1ced58ebd180718c2e401f7c501c9868346c7103bb2d20aa20d31b91530bca278d86a2ef777a920915b2bf41c4e6821dfb29aa3c4a27bcd7ad06e3e17ee01cdecfbb38e1003757f52ff65c1a03e1806439615b770cbda3088c60021d069c6862eccbf0c4165c"], 0x1, 0x3) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="03020100000100200002c081913e760c2477c3b01f4f587f0b0277b1fa70d38ca25b98ec641d73435f1af5f80da8ec325848057c468c0c68ba6b494601870b3f848bca953d09ff01bcf5d1e2091cc0a121280fa4bc2a000000b8498235d98d1e5d6f979c78d6add0de3170a4bbf5de6a0741ae587917827a7725d9ccb357878812d3fab9e2b71469538b04c6a4afdba3afbb364474617c9009129c9be626fa38fa"], 0xc, 0x1) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x208002, 0x24) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000400)=0x101) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x82) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40a8111, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x11200, 0x0) recvfrom$unix(r3, &(0x7f0000000680)=""/72, 0xfcf0, 0x10000, &(0x7f0000000700)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0xfffffffffffffddb) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r4 = eventfd2(0x0, 0x800) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000380)=0x3f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c9c380}) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x80000000002) 12:43:50 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:50 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:50 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'ip6gbe\x00\x00p0\x00\x00@\x00', 0x1}, 0x18) r0 = socket(0xa, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 12:43:50 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x8001}}) 12:43:50 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) write$P9_RLOCK(r2, 0x0, 0x0) 12:43:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="656e633d72617720685573703d0874726565626f673235362967656e65fcc36300c6ff6cc0c30cedbd0000080000000004df70922957e8322f6068a62ac388be1134133c0507bed5d8c08d47f2b182928f6678d2e5e6bcd4aa9b970d"], 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 12:43:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:43:50 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:43:50 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x300000000000031, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000300)) 12:43:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) [ 3140.290184][ C1] net_ratelimit: 16 callbacks suppressed [ 3140.295880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3140.303591][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3140.770142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3140.776167][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.170238][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.175997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.410130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.415943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.970140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.975935][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:43:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f000000efcc)={{0x1}}) 12:43:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0xd48f1f8357fa1f19) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 12:43:56 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) write$P9_RLOCK(r2, 0x0, 0x0) 12:43:56 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:43:56 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:43:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:57 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:43:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x4000000001c, &(0x7f0000000000)={@loopback}, 0x14) 12:43:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:43:57 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:43:57 executing program 4: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3145.330140][ C1] net_ratelimit: 14 callbacks suppressed [ 3145.330155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.341581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3145.570115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.575904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3146.130155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3146.135921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3146.530129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3146.535920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3147.010149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.015919][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:44:03 executing program 3: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') recvmmsg(r2, &(0x7f0000001cc0)=[{{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000005c0)=""/223, 0xdf}], 0x2, &(0x7f00000006c0)=""/210, 0xd2}, 0x1}, {{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)=""/95, 0x5f}, {0x0}], 0x2, &(0x7f0000000980)=""/70, 0x46}, 0x3}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a00)=""/116, 0x74}], 0x1, &(0x7f0000000a80)=""/176, 0xb0}, 0xfffffffc}, {{&(0x7f0000000b40)=@nl=@unspec, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000bc0)=""/190, 0xbe}, 0x6}], 0x4, 0x40000000, 0x0) sendfile(r2, r3, 0x0, 0x2007ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xfffffe3d, 0x0}}], 0x251, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x2007ff) getsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000400)=""/185, &(0x7f0000000140)=0xfffffffffffffce1) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x29) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) chdir(&(0x7f0000000080)='./file0\x00') r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="72051a4d09846eb4dcafd3059a073c866b21d9b21d9bcbd98809b37d80174480e3c6906017b60f759fd1a58e476dd776f00936b3a1e77d16eae5d198dcfb0ded681eacc995bcddeba53f00c5a5ff680b56a28a62812b46478c741f1acb1e3a09ae35ec8b0b3c723780e31b690985c6df5f95099cd584571c49"], 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='y\x00', 0x2, 0x0) write$UHID_INPUT(r6, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(r6, r6, &(0x7f0000000240), 0x2008000fffffffe) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) fcntl$addseals(r7, 0x409, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x1000, 0x1}) 12:44:03 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) write$P9_RLOCK(r2, 0x0, 0x0) 12:44:03 executing program 5: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x1c0c) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x10, 0x3, 0x4) ioctl$RTC_AIE_OFF(r3, 0x7002) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)={0x38d}) fstat(r5, &(0x7f0000000400)) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000380)) fcntl$getown(r4, 0x9) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80) 12:44:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:03 executing program 4: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:03 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:03 executing program 4: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:03 executing program 5: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 12:44:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:03 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) socketpair(0x5, 0xa, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000140)=0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@empty, 0x0, r6}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 3150.700079][ C1] net_ratelimit: 16 callbacks suppressed [ 3150.700093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3150.711581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.170125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.175915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.570141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.575944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.810150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.815971][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3152.370126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.375934][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3155.730093][ C1] net_ratelimit: 14 callbacks suppressed [ 3155.730102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3155.741667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3155.980096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3155.985905][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3156.530108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.535913][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3156.930142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3156.936055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.420111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.425907][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:44:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:10 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) write$P9_RLOCK(r2, 0x0, 0x0) 12:44:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:44:10 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x2000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) socket$kcm(0x11, 0x8000000000000003, 0x0) write$cgroup_subtree(r2, &(0x7f00000019c0)=ANY=[@ANYBLOB="126d656d6f72792008c66341a50c19160f89cd73fe1837605df501497b20f05729c6edbf10d4496b2296322f2cc37a5178e3b393ef98b19ba70000c35f6143f1b8bb428164673c70cbc857400fc1b78684e5ec7749c308773fee63a6678f5822c8fb4d7a719399766489dfd8c73f0b79431f41177d1bf780f0c4c36e2aa82612"], 0xfdef) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x20000000) 12:44:10 executing program 3: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') recvmmsg(r2, &(0x7f0000001cc0)=[{{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000005c0)=""/223, 0xdf}], 0x2, &(0x7f00000006c0)=""/210, 0xd2}, 0x1}, {{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)=""/95, 0x5f}, {0x0}], 0x2, &(0x7f0000000980)=""/70, 0x46}, 0x3}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a00)=""/116, 0x74}], 0x1, &(0x7f0000000a80)=""/176, 0xb0}, 0xfffffffc}, {{&(0x7f0000000b40)=@nl=@unspec, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000bc0)=""/190, 0xbe}, 0x6}], 0x4, 0x40000000, 0x0) sendfile(r2, r3, 0x0, 0x2007ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xfffffe3d, 0x0}}], 0x251, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x2007ff) getsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000400)=""/185, &(0x7f0000000140)=0xfffffffffffffce1) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x29) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) chdir(&(0x7f0000000080)='./file0\x00') r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="72051a4d09846eb4dcafd3059a073c866b21d9b21d9bcbd98809b37d80174480e3c6906017b60f759fd1a58e476dd776f00936b3a1e77d16eae5d198dcfb0ded681eacc995bcddeba53f00c5a5ff680b56a28a62812b46478c741f1acb1e3a09ae35ec8b0b3c723780e31b690985c6df5f95099cd584571c49"], 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='y\x00', 0x2, 0x0) write$UHID_INPUT(r6, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(r6, r6, &(0x7f0000000240), 0x2008000fffffffe) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) fcntl$addseals(r7, 0x409, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x1000, 0x1}) 12:44:10 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:44:11 executing program 5: clone(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) 12:44:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:44:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:44:11 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) 12:44:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) close(r0) 12:44:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:44:11 executing program 5: socket$kcm(0x11, 0x0, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="406386dd6f"], 0xfdef) [ 3161.090137][ C1] net_ratelimit: 16 callbacks suppressed [ 3161.090154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3161.102255][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3161.570124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3161.575951][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3161.970143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3161.975928][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.210130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.215901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.770131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.775918][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:17 executing program 3: 12:44:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:17 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:44:17 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) 12:44:17 executing program 5: 12:44:17 executing program 5: 12:44:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:44:17 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:44:17 executing program 5: [ 3166.130125][ C1] net_ratelimit: 14 callbacks suppressed [ 3166.130135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3166.141650][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3166.370168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3166.375985][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3166.930136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3166.936011][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3167.330118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3167.335937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3167.810116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3167.815989][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:44:21 executing program 3: 12:44:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:21 executing program 5: 12:44:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:44:21 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:21 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:21 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:22 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000380)='user\x00', 0x1) write$binfmt_script(r4, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 12:44:22 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) [ 3171.490115][ C1] net_ratelimit: 16 callbacks suppressed [ 3171.490129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3171.501613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3171.970141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3171.975972][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3172.370122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3172.376149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3172.610159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3172.615944][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:26 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x18) io_setup(0x10000000ffff, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x200000000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d487ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000480)={0xf, 0x6, {0x51, 0x0, 0x7f, {0x2, 0x1}, {0x6, 0x7}, @rumble={0x3, 0x4}}, {0x53, 0x0, 0xfffb, {0x3f, 0x5}, {0xfff9, 0x2}, @period={0x59, 0x8, 0x4, 0x6, 0x8, {0x7, 0x0, 0x2, 0x5}, 0x1, &(0x7f0000000040)=[0x5]}}}) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x4) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x7d) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000300)=""/132, &(0x7f0000000140)=0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) request_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, &(0x7f0000000280)='em0$.\'./eth1}\x0fnodev\xf5cpuset}!vboxnet1&-.[md5sumuserwlan0system-\xe8em1vmnet1*\x00', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$void(r7, 0xc0045878) ftruncate(r4, 0x2007fff) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) 12:44:26 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:26 executing program 5: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x100000000000001}, {}, {0x6, 0x0, 0x0, 0xffffffffffffffff}]}) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') 12:44:26 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:26 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000ffffffff) 12:44:26 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:26 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x63e132568c0a2907, 0x0) vmsplice(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x0) [ 3173.170104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3173.176002][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) [ 3176.530131][ C1] net_ratelimit: 14 callbacks suppressed [ 3176.530145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.541646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3176.770130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.775939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3177.330119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3177.335978][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3177.740093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3177.745918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3178.210146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3178.215937][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:44:33 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x18) io_setup(0x10000000ffff, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x200000000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d487ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000480)={0xf, 0x6, {0x51, 0x0, 0x7f, {0x2, 0x1}, {0x6, 0x7}, @rumble={0x3, 0x4}}, {0x53, 0x0, 0xfffb, {0x3f, 0x5}, {0xfff9, 0x2}, @period={0x59, 0x8, 0x4, 0x6, 0x8, {0x7, 0x0, 0x2, 0x5}, 0x1, &(0x7f0000000040)=[0x5]}}}) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x4) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x7d) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000300)=""/132, &(0x7f0000000140)=0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) request_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, &(0x7f0000000280)='em0$.\'./eth1}\x0fnodev\xf5cpuset}!vboxnet1&-.[md5sumuserwlan0system-\xe8em1vmnet1*\x00', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$void(r7, 0xc0045878) ftruncate(r4, 0x2007fff) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) 12:44:33 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 12:44:33 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000ffffffff) 12:44:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:33 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000ffffffff) [ 3180.471754][ T9120] 9pnet: Insufficient options for proto=fd 12:44:33 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 12:44:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 12:44:33 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) [ 3180.785900][ T9231] 9pnet: Insufficient options for proto=fd 12:44:34 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3181.890158][ C1] net_ratelimit: 16 callbacks suppressed [ 3181.895825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3181.901554][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.370143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.375928][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.770147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.776024][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3183.010120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3183.015969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3183.580103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3183.585895][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:38 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x18) io_setup(0x10000000ffff, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x200000000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d487ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000480)={0xf, 0x6, {0x51, 0x0, 0x7f, {0x2, 0x1}, {0x6, 0x7}, @rumble={0x3, 0x4}}, {0x53, 0x0, 0xfffb, {0x3f, 0x5}, {0xfff9, 0x2}, @period={0x59, 0x8, 0x4, 0x6, 0x8, {0x7, 0x0, 0x2, 0x5}, 0x1, &(0x7f0000000040)=[0x5]}}}) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x4) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x7d) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000300)=""/132, &(0x7f0000000140)=0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) request_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, &(0x7f0000000280)='em0$.\'./eth1}\x0fnodev\xf5cpuset}!vboxnet1&-.[md5sumuserwlan0system-\xe8em1vmnet1*\x00', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$void(r7, 0xc0045878) ftruncate(r4, 0x2007fff) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) 12:44:38 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 12:44:38 executing program 5: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x332, 0x0) 12:44:38 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:38 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) [ 3185.825643][ T9255] 9pnet: Insufficient options for proto=fd 12:44:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x122) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @sack_perm, @mss, @mss, @mss], 0x12fb85) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000200), 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 12:44:39 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:39 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:39 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a00, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1825, 0x0) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) [ 3186.930130][ C1] net_ratelimit: 14 callbacks suppressed [ 3186.935865][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3186.941649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3187.170159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.175994][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3187.730234][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3187.736062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3188.130180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3188.136910][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3188.610120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3188.615901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3192.290159][ C1] net_ratelimit: 16 callbacks suppressed [ 3192.290176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3192.301710][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3192.770098][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3192.775899][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:44:46 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x18) io_setup(0x10000000ffff, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x200000000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44d487ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000480)={0xf, 0x6, {0x51, 0x0, 0x7f, {0x2, 0x1}, {0x6, 0x7}, @rumble={0x3, 0x4}}, {0x53, 0x0, 0xfffb, {0x3f, 0x5}, {0xfff9, 0x2}, @period={0x59, 0x8, 0x4, 0x6, 0x8, {0x7, 0x0, 0x2, 0x5}, 0x1, &(0x7f0000000040)=[0x5]}}}) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x4) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x7d) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000300)=""/132, &(0x7f0000000140)=0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) request_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, &(0x7f0000000280)='em0$.\'./eth1}\x0fnodev\xf5cpuset}!vboxnet1&-.[md5sumuserwlan0system-\xe8em1vmnet1*\x00', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$void(r7, 0xc0045878) ftruncate(r4, 0x2007fff) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) 12:44:46 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:46 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) creat(0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) r3 = syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0x800, 0x0) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000000600)="f15837e8ce2fda87a1c89b8a770eda134db3e28d699a6ac5db5a2cf89bab866d0cc60804de46203f507553313f6b7e9570d8cc8b4aa6343b3ee13f8335b3a8bf16f4f1cf0d669fc2b1fd20c9cc1207a5ef2dd06831e65eda774634acfbf19bd81d76f72ea719637ddf71f4f72d8fa4bf4b6eccf6c0a5bd2b7ea3b1c3a8384dc313b6cadaeceffe720ff26533db2716a198b5d447be3342c3a59bcbaba04238", 0x9f}], 0x1, 0x9) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x2, 0xd3, 0x5}, 'syz1\x00', 0x48}) fchdir(r2) r4 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000004c0)={0x60000000}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffff, 0x1, 0x4, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2d6, 0x0, 0x69eed86a, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xfffffffffffffffd}) ioprio_set$pid(0x7, 0x0, 0x5) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0x2, &(0x7f0000000500)=[{}, {}]}) ioprio_get$uid(0x3, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x0, 0x0, &(0x7f0000000380)) unshare(0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000580)=0x401) fcntl$setstatus(r4, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="edadd055d2a3fac900e74fa7044351000000000000"], 0x7, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:44:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:46 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) [ 3193.170102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.175904][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x22000, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = socket$inet6(0xa, 0x7, 0xfffffffffffffffe) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000100), 0xcb) fchdir(r3) creat(&(0x7f0000000540)='./file0\x00', 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) r7 = socket(0x11, 0x3, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @remote}}) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x9d6c, @initdev, 0x9}, {0xa, 0x4e23, 0x400000, @mcast2, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x4, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x312) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r8 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) 12:44:46 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3193.410091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.415922][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:46 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3193.970111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3193.976206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3197.330131][ C1] net_ratelimit: 14 callbacks suppressed [ 3197.330157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3197.341674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3197.570157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3197.575950][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3198.140108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3198.145999][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3198.540104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3198.545877][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3199.010164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3199.015949][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:44:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5500000018007fafb7a41cb22da280000206000000a843496c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef78a8c5afb83de441100d42c44e82afc5349fddd4ab94e", 0x55}], 0x1}, 0x0) 12:44:53 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001380)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 12:44:53 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:53 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:53 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[], 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000003a00)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffff7f6}, 0x18) 12:44:53 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[], 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:53 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:53 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:54 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) socket$inet6(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:54 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3202.690165][ C1] net_ratelimit: 16 callbacks suppressed [ 3202.690185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3202.701692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3203.170136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3203.175937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3203.570188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3203.578354][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3203.810150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3203.816087][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3204.370181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3204.375967][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:44:58 executing program 3: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)="75601a51e22b1c8aa27688b36e5122d91b56aa60963a906f8db8bc010000003597dc16f72db3c74ca76cda3d2740d26f0019a896246b3503af793085281767de2b34957f206f", 0xfffffffffffffec8, 0x83e8, 0x0, 0xffffffffffffff37) 12:44:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[], 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea\x17\xc4l\xce\xa6\xfdn|y\x17\xfaB\xdd0\x1a\xd0\xa0\xc3\xef\xf2\xc4\xe5\x93\xc9\xf7nZT\xc1\xf2\xb7M\x91\x97\v\xf5{\x1b\x8c\xfe\x16\xe8j])\xa4V7\xf4\xfc\xfd\xe6\xba\xf2%\x90T\x0eo\xa9\xd9,\xf3\xe8qHj6\x87\xc8\xce\xbd\xac\xfa\xb9D`\x86\xc8\x15\x16m\xff\x8e\v\xea\b\x98\xc3\\\xf9\x02m\x8c\xf8\xc8\xb8J\xde', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0\x00'}) dup3(r3, r4, 0x0) dup3(r3, r0, 0x100000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0\x00'}) dup3(r5, r6, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth0\x00'}) dup3(r7, r8, 0x0) fcntl$setstatus(r7, 0x4, 0x600) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r9 = socket(0xa, 0x80001, 0x0) ioctl$int_in(r9, 0x541f, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:44:58 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x9}, 0xc) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x8000ffffffff) 12:44:58 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:44:59 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:59 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:44:59 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:44:59 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:44:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x9005, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x811e}, 0x300) 12:44:59 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3207.730211][ C1] net_ratelimit: 14 callbacks suppressed [ 3207.735994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3207.741943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3207.980160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3207.986107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3208.530166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3208.536116][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3208.930188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3208.936161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3209.410155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3209.416171][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3213.090148][ C1] net_ratelimit: 16 callbacks suppressed [ 3213.090164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3213.102088][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 12:45:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710080000000001ffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:45:06 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:45:06 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:45:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff21801000"], 0xb) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:06 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:45:06 executing program 5: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x163942, 0xb6a551c78246b62e) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000500)='cilter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340), &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @dev={[], 0x12}}, 0x10) clock_gettime(0x6, &(0x7f0000000040)) nanosleep(0x0, &(0x7f0000000140)) tkill(r0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x40, 0x104) 12:45:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff21801000"], 0xb) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3213.570081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3213.575920][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:45:06 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:45:06 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000a) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000ffffffff) [ 3213.970096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3213.975941][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.210146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.216046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.770127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.775904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.130103][ C1] net_ratelimit: 14 callbacks suppressed [ 3218.135810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.141679][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.370164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.375942][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.930148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.935914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3219.330147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3219.335983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3219.820128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3219.825919][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:45:14 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xfffffffe8000201f}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 12:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) dup2(r3, r1) dup2(r1, r0) dup2(r3, r2) 12:45:14 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:45:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff21801000"], 0xb) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:14 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000a) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000ffffffff) 12:45:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:45:14 executing program 1: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000a) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000ffffffff) 12:45:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff218010000800395032"], 0x10) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:14 executing program 5: socket(0x4000e, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fremovexattr(r2, &(0x7f00000005c0)=ANY=[]) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ftruncate(0xffffffffffffffff, 0x0) 12:45:15 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:45:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:15 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 3223.490187][ C1] net_ratelimit: 16 callbacks suppressed [ 3223.495976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3223.501837][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3223.970194][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3223.976103][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3224.370177][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3224.376407][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3224.610145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3224.616031][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.170160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.175995][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:21 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 12:45:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff218010000800395032"], 0x10) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x15000300, 0x100) 12:45:21 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 12:45:21 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:45:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff218010000800395032"], 0x10) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:21 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 12:45:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 12:45:21 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:21 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 12:45:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff218010000800395032303030"], 0x13) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3228.530119][ C1] net_ratelimit: 14 callbacks suppressed [ 3228.530133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3228.541641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3228.770113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3228.775914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3229.330138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3229.335916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3229.730175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3229.735983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3230.210124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3230.216014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3233.890114][ C1] net_ratelimit: 16 callbacks suppressed [ 3233.896475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3233.902196][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000000000000003c2dc7cd900"], 0x14}}, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0xfef4, &(0x7f00000027c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000480)=""/233, 0xe9}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000001500)=""/153, 0x84}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/170, 0xaa}, {&(0x7f0000002700)=""/192, 0xc0}], 0x7}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 12:45:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:27 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 12:45:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) 12:45:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff218010000800395032303030"], 0x13) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3234.370097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3234.376044][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:45:27 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 12:45:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:45:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff218010000800395032303030"], 0x13) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:27 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) [ 3234.770099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3234.775908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3234.806710][T10917] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:45:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) [ 3234.955889][T10917] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 3235.010093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3235.015933][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e"], 0x14) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3235.570092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3235.575903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.930108][ C1] net_ratelimit: 14 callbacks suppressed [ 3238.935829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3238.941598][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3239.170098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3239.176006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3239.730126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3239.735985][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3240.130125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3240.136085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3240.610134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3240.615892][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:45:37 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) 12:45:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000016c0)={0x53, 0x0, 0xb, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000015c0)="0d1b0ce10768d93fe9b9d2", 0x0, 0x5, 0x0, 0x0, 0x0}) 12:45:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:45:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e"], 0x14) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:45:37 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) 12:45:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e"], 0x14) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 3244.290130][ C1] net_ratelimit: 16 callbacks suppressed [ 3244.290144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3244.301684][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 12:45:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 12:45:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 3244.719112][T11480] 9pnet: Insufficient options for proto=fd [ 3244.770097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3244.775933][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.180109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.185955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.410097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.415892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.970128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.976001][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3249.330123][ C1] net_ratelimit: 14 callbacks suppressed [ 3249.335910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3249.341763][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3249.570101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3249.575891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3250.130124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.135934][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 12:45:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:43 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) [ 3250.530116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3250.535899][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3250.672889][T11602] 9pnet: Insufficient options for proto=fd 12:45:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x7530}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 12:45:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 3250.888726][T11707] 9pnet: Insufficient options for proto=fd 12:45:44 executing program 2: [ 3251.010082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3251.015952][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:45:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:44 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) [ 3254.690132][ C1] net_ratelimit: 16 callbacks suppressed [ 3254.690141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3254.701757][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3255.170129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3255.175910][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3255.570125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3255.575968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3255.810128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3255.816021][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.370130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.376704][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:45:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:50 executing program 2: 12:45:50 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:50 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) 12:45:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:50 executing program 2: 12:45:50 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:50 executing program 2: 12:45:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 3259.730125][ C1] net_ratelimit: 14 callbacks suppressed [ 3259.730136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3259.741625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3259.970144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3259.975952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3260.530120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3260.535894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3260.930125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3260.935948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3261.410144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3261.416009][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:45:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:45:57 executing program 2: 12:45:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:45:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:57 executing program 5: 12:45:57 executing program 0: 12:45:57 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x80002, 0x0) write$P9_RVERSION(r0, 0x0, 0x3f00) 12:45:57 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:45:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x40000000000025d, 0x0) getresgid(0x0, 0x0, 0x0) 12:45:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:45:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3264.194522][T12181] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. 12:45:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x7fff) r2 = dup3(r1, r0, 0x0) write$P9_RLOCK(r2, 0x0, 0x0) [ 3265.090116][ C1] net_ratelimit: 16 callbacks suppressed [ 3265.095794][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3265.101531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3265.570129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3265.575968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3265.970151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3265.975983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3266.210106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3266.215879][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3266.770137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3266.775895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.130149][ C1] net_ratelimit: 14 callbacks suppressed [ 3270.130165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.141676][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:03 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:46:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x209020, 0x0) 12:46:03 executing program 0: [ 3270.370101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.375897][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.462477][T12402] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. 12:46:03 executing program 0: 12:46:03 executing program 5: 12:46:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:46:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:03 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:03 executing program 0: [ 3270.856784][T12518] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3270.930105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.935920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3271.330121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3271.335896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3271.810121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3271.815899][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.490152][ C1] net_ratelimit: 16 callbacks suppressed [ 3275.490168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3275.501591][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.970115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3275.975990][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.370106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3276.375908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.610109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3276.616026][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:10 executing program 5: 12:46:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:46:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:10 executing program 0: 12:46:10 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) [ 3277.013458][T12534] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. 12:46:10 executing program 0: 12:46:10 executing program 5: 12:46:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:46:10 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfc) [ 3277.170091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3277.175920][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:10 executing program 0: [ 3280.530139][ C1] net_ratelimit: 14 callbacks suppressed [ 3280.530156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3280.541595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3280.770116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3280.775894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.330104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3281.335953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3281.730111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3281.735999][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3282.220109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3282.225908][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:46:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:17 executing program 5: 12:46:17 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f411f46a6b567b4d5", 0xfc) 12:46:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:46:17 executing program 0: 12:46:17 executing program 0: 12:46:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000ffffffff) 12:46:17 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfc) 12:46:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}}, 0x0) 12:46:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:17 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x12f082e2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 3285.890150][ C1] net_ratelimit: 16 callbacks suppressed [ 3285.895831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3285.901623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3286.370155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3286.375929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3286.770121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3286.775900][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3287.010105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.015896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3287.570124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3287.575904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3290.930114][ C1] net_ratelimit: 14 callbacks suppressed [ 3290.930126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3290.941588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3291.170104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3291.175873][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:24 executing program 2: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000ffffffff) 12:46:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}}, 0x0) 12:46:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:24 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @multicast1, @random="1db9299382cd", @dev}}}}, 0x0) 12:46:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) 12:46:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000ffffffff) 12:46:24 executing program 2: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f411f46a6b567b4d5", 0xfc) 12:46:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}}, 0x0) [ 3291.730117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3291.735904][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000ffffffff) 12:46:25 executing program 0: r0 = socket(0x18, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 12:46:25 executing program 2: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:25 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3292.130093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3292.135905][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:25 executing program 5: open(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0x10000015a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000106000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) [ 3292.610121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3292.615876][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3296.290163][ C1] net_ratelimit: 16 callbacks suppressed [ 3296.295867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3296.301687][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3296.770155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3296.775998][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3297.170119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3297.175937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3297.410139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3297.415923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3297.970103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3297.975920][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:33 executing program 2: r0 = socket(0x30002000000010, 0x0, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000ffffffff) 12:46:33 executing program 0: 12:46:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:33 executing program 5: 12:46:33 executing program 2: r0 = socket(0x30002000000010, 0x0, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000ffffffff) 12:46:33 executing program 5: 12:46:33 executing program 0: 12:46:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:33 executing program 0: [ 3301.330116][ C1] net_ratelimit: 14 callbacks suppressed [ 3301.335836][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3301.341579][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3301.570129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3301.575928][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3302.130138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3302.140796][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3302.530130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3302.535913][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3303.010146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3303.016025][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3306.690129][ C1] net_ratelimit: 16 callbacks suppressed [ 3306.690142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3306.701602][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3307.170136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.175953][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:46:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:40 executing program 2: r0 = socket(0x30002000000010, 0x0, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 12:46:40 executing program 5: 12:46:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000ffffffff) 12:46:40 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:40 executing program 0: 12:46:40 executing program 5: 12:46:40 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:40 executing program 2: socket(0x30002000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfc) [ 3307.570145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.575970][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:40 executing program 0: 12:46:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x0) 12:46:40 executing program 5: [ 3307.810094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.815894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3308.370135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3308.375908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3311.730096][ C1] net_ratelimit: 14 callbacks suppressed [ 3311.730105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3311.741573][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3311.970128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3311.975909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3312.530107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.535887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3312.930097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3312.935891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3313.410090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3313.415890][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:48 executing program 0: 12:46:48 executing program 5: 12:46:48 executing program 2: socket(0x30002000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfc) 12:46:48 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x0) 12:46:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:48 executing program 5: 12:46:48 executing program 0: 12:46:48 executing program 0: 12:46:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:48 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x0) 12:46:48 executing program 2: socket(0x30002000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfc) [ 3317.090134][ C1] net_ratelimit: 16 callbacks suppressed [ 3317.090143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3317.101612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3317.570128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3317.575909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3317.970138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3317.976028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.210111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.215899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.770129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3318.775914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3322.130181][ C1] net_ratelimit: 14 callbacks suppressed [ 3322.130195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3322.141752][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:55 executing program 5: 12:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:46:55 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, 0x0, 0x0) 12:46:55 executing program 0: 12:46:55 executing program 1: [ 3322.370106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3322.375989][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:46:55 executing program 0: 12:46:55 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, 0x0, 0x0) 12:46:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:55 executing program 5: 12:46:55 executing program 1: 12:46:55 executing program 0: 12:46:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:46:56 executing program 5: [ 3322.930093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3322.935922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3323.330150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3323.335957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3323.810141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3323.815931][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3327.490118][ C1] net_ratelimit: 16 callbacks suppressed [ 3327.495821][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3327.501600][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3327.970154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3327.975929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3328.370103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3328.375863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3328.610135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3328.616000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3329.170118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3329.175885][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:04 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, 0x0, 0x0) 12:47:04 executing program 1: 12:47:04 executing program 5: 12:47:04 executing program 0: 12:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:05 executing program 0: 12:47:05 executing program 1: 12:47:05 executing program 5: 12:47:05 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 12:47:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:47:05 executing program 0: 12:47:05 executing program 5: 12:47:05 executing program 1: 12:47:05 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 12:47:05 executing program 1: [ 3332.530121][ C1] net_ratelimit: 14 callbacks suppressed [ 3332.530137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.541596][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3332.780111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.785886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3333.330118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3333.335940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3333.730105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3333.735948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3334.210135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3334.215949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3337.890121][ C1] net_ratelimit: 16 callbacks suppressed [ 3337.890136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3337.901805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.370106][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.375947][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.770123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.775930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3339.010196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3339.016015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3339.570140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3339.575911][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:13 executing program 0: 12:47:13 executing program 5: 12:47:13 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:47:13 executing program 1: 12:47:13 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) 12:47:13 executing program 1: 12:47:13 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d073070000", 0x7e) 12:47:13 executing program 5: 12:47:13 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:47:13 executing program 0: 12:47:13 executing program 1: [ 3342.930185][ C1] net_ratelimit: 14 callbacks suppressed [ 3342.930195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3342.941635][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3343.170102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3343.175855][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3343.730115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3343.735965][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3344.130108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3344.135888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3344.610125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3344.615913][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:47:20 executing program 0: 12:47:20 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d073070000", 0x7e) 12:47:20 executing program 5: 12:47:20 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) 12:47:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) [ 3347.631399][T13754] 9pnet: Insufficient options for proto=fd 12:47:20 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:20 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d073070000", 0x7e) 12:47:20 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(0x0, 0x0, 0x0) link(0x0, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 12:47:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) recvfrom$inet(r1, 0x0, 0x0, 0x40000102, 0x0, 0x0) [ 3347.929609][T13785] 9pnet: Insufficient options for proto=fd 12:47:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000015c0)='dctcp-reno\x00', 0xb) r2 = epoll_create1(0x100000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000340)={{0x0, 0x0, @identifier="25577e259693288c4b58493d6106cb72"}}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup2(r3, r0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xfffffffffffffffe) syz_open_procfs(r5, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto(r6, &(0x7f0000000040)="b6", 0x1, 0x1, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000001c0)=""/107, 0x6b}], 0x3, &(0x7f00000003c0)=""/150, 0x96}, 0x18001) 12:47:21 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825b", 0xbd) 12:47:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 12:47:21 executing program 1: [ 3348.290112][ C1] net_ratelimit: 16 callbacks suppressed [ 3348.290126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3348.301609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3348.341627][T14089] 9pnet: Insufficient options for proto=fd [ 3348.770180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3348.775994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3349.170128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3349.176035][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3349.410120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3349.415958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3349.970111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3349.975886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3353.330113][ C1] net_ratelimit: 14 callbacks suppressed [ 3353.330128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3353.341731][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3353.570137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3353.575964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3354.130128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3354.135889][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3354.530122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3354.535909][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:27 executing program 0: 12:47:27 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825b", 0xbd) 12:47:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:27 executing program 5: 12:47:27 executing program 1: [ 3354.916093][T14106] 9pnet: Insufficient options for proto=fd 12:47:28 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825b", 0xbd) 12:47:28 executing program 1: [ 3355.010124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3355.015954][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:47:28 executing program 0: 12:47:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 12:47:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:28 executing program 1: [ 3355.305432][T14139] 9pnet: Insufficient options for proto=fd [ 3358.690110][ C1] net_ratelimit: 16 callbacks suppressed [ 3358.690126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3358.701964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3359.170122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3359.175965][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3359.570115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3359.575976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3359.810156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3359.816054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3360.370119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3360.375979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.730069][ C1] net_ratelimit: 14 callbacks suppressed [ 3363.730079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.741575][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.970084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.975973][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:37 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91", 0xdd) 12:47:37 executing program 0: 12:47:37 executing program 5: 12:47:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:37 executing program 1: 12:47:37 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91", 0xdd) 12:47:37 executing program 5: [ 3364.366463][T14248] 9pnet: Insufficient options for proto=fd 12:47:37 executing program 0: 12:47:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:37 executing program 1: [ 3364.530079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3364.535874][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:37 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91", 0xdd) [ 3364.674457][T14261] 9pnet: Insufficient options for proto=fd [ 3364.930085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3364.935916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3365.410160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3365.415950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.090117][ C1] net_ratelimit: 16 callbacks suppressed [ 3369.090133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.101634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.570143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.575957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.970118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.975896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3370.210107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3370.215925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3370.770111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3370.775892][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:46 executing program 0: 12:47:46 executing program 1: 12:47:46 executing program 5: 12:47:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:46 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e5", 0xed) 12:47:46 executing program 1: [ 3373.708252][T14279] 9pnet: Insufficient options for proto=fd 12:47:46 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e5", 0xed) 12:47:46 executing program 0: 12:47:46 executing program 5: 12:47:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:47 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e5", 0xed) [ 3374.130083][ C1] net_ratelimit: 14 callbacks suppressed [ 3374.130107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3374.141585][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3374.176638][T14296] 9pnet: Insufficient options for proto=fd [ 3374.370099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3374.375868][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3374.930105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3374.935896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3375.330128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3375.335940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3375.810195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3375.816078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3379.490097][ C1] net_ratelimit: 16 callbacks suppressed [ 3379.490106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3379.501551][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3379.970141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3379.975948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3380.370079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3380.375866][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3380.610110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3380.615911][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:54 executing program 0: 12:47:54 executing program 1: 12:47:54 executing program 5: 12:47:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:47:54 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f41", 0xf5) 12:47:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3380.982929][T14306] 9pnet: Insufficient options for proto=fd 12:47:54 executing program 1: 12:47:54 executing program 0: 12:47:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:47:54 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f41", 0xf5) 12:47:54 executing program 5: [ 3381.180072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3381.185871][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:47:54 executing program 1: [ 3381.318679][T14323] 9pnet: Insufficient options for proto=fd 12:47:54 executing program 5: [ 3384.530136][ C1] net_ratelimit: 14 callbacks suppressed [ 3384.535803][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3384.541565][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3384.780141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3384.786392][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3385.330128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3385.335940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3385.730112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3385.735915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3386.210140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3386.215961][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:48:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:01 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f41", 0xf5) 12:48:01 executing program 0: 12:48:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:01 executing program 1: 12:48:01 executing program 5: 12:48:01 executing program 0: [ 3388.353826][T14346] 9pnet: Insufficient options for proto=fd 12:48:01 executing program 1: 12:48:01 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f411f46a6b5", 0xf9) 12:48:01 executing program 5: 12:48:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:01 executing program 0: [ 3388.756625][T14361] 9pnet: Insufficient options for proto=fd [ 3389.890129][ C1] net_ratelimit: 16 callbacks suppressed [ 3389.895825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3389.901589][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3390.370145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3390.375954][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3390.770139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3390.775964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3391.010125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3391.015976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3391.570126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3391.576060][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:48:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:08 executing program 1: 12:48:08 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f411f46a6b5", 0xf9) 12:48:08 executing program 5: 12:48:08 executing program 0: 12:48:08 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:08 executing program 5: 12:48:08 executing program 0: 12:48:08 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f411f46a6b5", 0xf9) [ 3394.940083][ C1] net_ratelimit: 14 callbacks suppressed [ 3394.940100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.951590][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.965045][T14379] 9pnet: Insufficient options for proto=fd 12:48:08 executing program 1: 12:48:08 executing program 5: 12:48:08 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3395.180092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3395.185911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3395.321610][T14393] 9pnet: Insufficient options for proto=fd [ 3395.730125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3395.735945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3396.130121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3396.135928][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3396.610126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3396.615927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3400.290158][ C1] net_ratelimit: 16 callbacks suppressed [ 3400.290173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3400.301634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3400.770087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3400.775893][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3401.170116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.175925][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:48:14 executing program 0: 12:48:14 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfb) 12:48:14 executing program 5: 12:48:14 executing program 1: 12:48:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3401.410091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.415906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3401.496310][T14410] 9pnet: Insufficient options for proto=fd 12:48:14 executing program 1: 12:48:14 executing program 0: 12:48:14 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="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", 0xfb) 12:48:14 executing program 5: 12:48:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:15 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:48:15 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 12:48:15 executing program 2: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="fc00000028000703ab092500090017000aab07ff010000000000769321000100ff0100000005d0000000000009039815fa2c1ec28656aaa79bb94b59fe100000bc00020000036c6c256f1a272f2e117c22ebc21121400000006000c821a4a6f9607668bf0478aa2a7c8b911ea7cc3f8a2fcb5d7bd5afaa8934d0730700000020d7d5bbc91a3e2e80772c05defd5a32e280fc83ab1afad60ce9c0bfb8fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63941591cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16b17e583df150c3b880f411f46a6b567b4", 0xfb) [ 3401.857980][T14422] 9pnet: Insufficient options for proto=fd 12:48:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='9'], 0x1}}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 3401.968948][T12054] hid-generic 0000:0000:0000.00B8: ignoring exceeding usage max [ 3401.976704][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.976747][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3402.110689][T12054] hid-generic 0000:0000:0000.00B8: hidraw0: HID v0.00 Device [syz1] on sz1 12:48:15 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3402.188180][T14433] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 3402.209917][T14433] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3402.254803][T14433] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3402.334628][T14433] EXT4-fs (loop1): unsupported descriptor size 59854 [ 3402.340619][T14553] 9pnet: Insufficient options for proto=fd [ 3405.330113][ C1] net_ratelimit: 14 callbacks suppressed [ 3405.335798][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3405.341658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3405.570108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3405.575918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3406.130103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3406.135990][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3406.530114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3406.535893][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3407.010143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3407.016116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3410.690102][ C1] net_ratelimit: 16 callbacks suppressed [ 3410.690117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3410.701641][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:48:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x14f42246) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:48:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 12:48:24 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x40, 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) 12:48:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:48:24 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) [ 3410.924464][T14568] 9pnet: Insufficient options for proto=fd 12:48:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:48:24 executing program 2: [ 3411.118568][T14804] 9pnet: Insufficient options for proto=fd [ 3411.133882][T14576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode 12:48:24 executing program 5: [ 3411.170210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3411.176104][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3411.188374][T14576] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3411.240634][T14576] EXT4-fs (loop1): unsupported descriptor size 59854 12:48:24 executing program 0: 12:48:24 executing program 2: 12:48:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3411.570107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3411.575924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3411.586653][T15019] 9pnet: Insufficient options for proto=fd [ 3411.810107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3411.815888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3412.370114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3412.376120][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3415.730134][ C1] net_ratelimit: 14 callbacks suppressed [ 3415.730149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3415.741607][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3415.970110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3415.975931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3416.530120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3416.536006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3416.930126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3416.935970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3417.410099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3417.415979][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:48:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:32 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:48:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="a6e0ea5c7de0"}, 0x14) 12:48:32 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x100082) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x51ea809d148a581a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000003c0)) syz_open_dev$amidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 12:48:32 executing program 0: 12:48:32 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3419.574285][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 3419.643556][T15139] 9pnet: Insufficient options for proto=fd 12:48:32 executing program 0: 12:48:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="a6e0ea5c7de0"}, 0x14) [ 3419.828947][T15140] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3419.858433][T15140] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended 12:48:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) [ 3419.873931][T15140] EXT4-fs (loop1): unsupported descriptor size 59854 12:48:33 executing program 0: 12:48:33 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) [ 3420.093549][T15350] 9pnet: Insufficient options for proto=fd 12:48:33 executing program 5: [ 3420.410462][T15442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3420.469447][T15442] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3420.531392][T15442] EXT4-fs (loop1): unsupported descriptor size 59854 [ 3421.090114][ C1] net_ratelimit: 16 callbacks suppressed [ 3421.095875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3421.101667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3421.570158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3421.575964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3421.970134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3421.975941][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3422.210138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3422.215929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3422.770126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3422.775951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.130068][ C1] net_ratelimit: 14 callbacks suppressed [ 3426.130078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.141495][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.380101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.385944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.930090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.935858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3427.330098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3427.336101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3427.810118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3427.815927][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:48:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:41 executing program 0: 12:48:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 12:48:41 executing program 5: 12:48:41 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x100082) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x51ea809d148a581a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000003c0)) syz_open_dev$amidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 12:48:41 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) [ 3428.254842][T15478] 9pnet: Insufficient options for proto=fd 12:48:41 executing program 0: [ 3428.356360][T15477] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3428.375026][T15477] EXT4-fs (loop1): unsupported descriptor size 0 12:48:41 executing program 5: 12:48:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:41 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:48:41 executing program 0: 12:48:41 executing program 5: [ 3428.909414][T15491] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3428.948610][T15491] EXT4-fs (loop1): unsupported descriptor size 0 [ 3431.490154][ C1] net_ratelimit: 16 callbacks suppressed [ 3431.495835][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3431.501572][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3431.970137][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3431.975971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3432.370134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.376100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3432.610087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.615895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3433.180118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3433.185879][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:48:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:48 executing program 5: 12:48:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:48 executing program 0: 12:48:48 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:48:48 executing program 2: 12:48:48 executing program 0: 12:48:48 executing program 2: 12:48:48 executing program 5: 12:48:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3435.761921][T15509] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended 12:48:49 executing program 2: 12:48:49 executing program 0: [ 3435.814943][T15509] EXT4-fs (loop1): unsupported descriptor size 0 [ 3436.530127][ C1] net_ratelimit: 14 callbacks suppressed [ 3436.536061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3436.541854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3436.770121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3436.776014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3437.330162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3437.335940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3437.730106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3437.736106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3438.210107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3438.215995][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3441.890079][ C1] net_ratelimit: 16 callbacks suppressed [ 3441.890100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3441.901627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3442.370129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3442.376056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3442.770078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3442.775872][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3443.021005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3443.026799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3443.570100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3443.576025][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:48:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:48:57 executing program 5: 12:48:57 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:48:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:57 executing program 2: 12:48:57 executing program 0: 12:48:57 executing program 5: 12:48:57 executing program 0: 12:48:57 executing program 2: 12:48:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:48:57 executing program 5: [ 3444.385007][T15539] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3444.385007][T15539] 12:48:57 executing program 0: [ 3446.930117][ C1] net_ratelimit: 14 callbacks suppressed [ 3446.935850][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3446.941675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3447.170111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3447.175922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3447.730116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3447.735944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3448.130166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3448.136041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3448.610155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3448.615983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3452.290139][ C1] net_ratelimit: 16 callbacks suppressed [ 3452.295850][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3452.301754][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3452.770120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3452.775885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3453.170070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3453.175929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3453.410089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3453.415932][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:49:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:06 executing program 2: 12:49:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:06 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:06 executing program 5: 12:49:06 executing program 0: 12:49:06 executing program 5: 12:49:06 executing program 2: 12:49:06 executing program 0: [ 3453.737618][T15572] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3453.737618][T15572] 12:49:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:07 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:07 executing program 0: [ 3453.970073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3453.975913][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3454.072264][T15584] 9pnet: Could not find request transport: fd0x0000000000000005 [ 3454.252788][T15588] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3454.252788][T15588] [ 3457.330104][ C1] net_ratelimit: 14 callbacks suppressed [ 3457.330119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.341670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3457.570122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.575901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3458.130093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3458.136004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3458.530103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3458.535909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3459.020077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3459.025892][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:49:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:14 executing program 2: 12:49:14 executing program 5: 12:49:14 executing program 0: 12:49:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:14 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:14 executing program 5: [ 3461.025148][T15708] 9pnet: Could not find request transport: fd0x0000000000000005 12:49:14 executing program 2: 12:49:14 executing program 0: 12:49:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3461.145071][T15704] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3461.145071][T15704] 12:49:14 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:14 executing program 5: [ 3461.356729][T15720] 9pnet: Could not find request transport: fd0x0000000000000005 [ 3461.612735][T15724] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3461.612735][T15724] [ 3462.690099][ C1] net_ratelimit: 16 callbacks suppressed [ 3462.690113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3462.701619][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.170175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.177014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.570126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.575912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.810162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.816015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3464.370138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3464.375943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3467.730091][ C1] net_ratelimit: 14 callbacks suppressed [ 3467.730107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3467.741578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3467.970105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3467.975886][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:49:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:21 executing program 2: 12:49:21 executing program 0: 12:49:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:21 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:49:21 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, r2, 0x0, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, r3, 0x0, 0x14, &(0x7f0000000380)='ppp0-]&-*\x92^\x8a\\md5sum\x00'}, 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000000f0000002500000000000000950000000000000095c7945faaaca77df7b091c97554bb677c101e46008000000000075900001943449fc1dcf86e0008d70000000000b1b5af027400005822e8f98b2b4077445b2fef3efdd4547d08d3f4215a73e8d9ffcd60ac4807eafef8a0e0a79ec8a07ce46fb7c53db16b29aa6d3ebc1107b9cf2a89a797cd5c578f00"/157], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x297ef) 12:49:21 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) socket$kcm(0x29, 0x5e0d38df6d2b66a2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x9) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=',', 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e8d96dceac96a670ea3e", 0xa}, {&(0x7f0000000140)="837bed3c1a0b4c05f6e558a1e15d5b822c15abeee728649540dec8adfc3148ac3944ea47e3ba02149a63db0bcdb2cd3b442bb1661bea474c2bc4c776acac963d74e6b5ea889d2036a9c1254408cfd93bc938c83dda99f6d098ab0fc547f815f407797e4dc19d50f627bf4401783d25f3bca1b337fdc988b6bd8a7a88a331e5e69fa203be166d52d665286398c72e4052d384b5331aae1d738f59434ba853ce90e5badd1e8b3ae8e6bcb3f7bafb", 0xad}, {&(0x7f0000000200)="46e9a11c8fb234db9c9b08b3dec54e7258efb18956aac85ba633ab52b3770d236293f9651f4aa05b81e014b337a0dfdb6d884d6507604d35789ad9568092eed6acab6d95c665d085f2d848af88ed557096b154b0e27076b3fcde1513501c86e7bd4e0845f8e8e068089b", 0x6a}], 0x3, &(0x7f0000000300)=[{0x70, 0x88, 0x59, "ca57bff0c75fe3d1046b685d2cd3a49709990c2548f201b17e8f4c2ae0b5c94204ff5f9d3346b73ebb505bfa6e0b2af8cdaace0af1e853fc5a11abd062a97ed759b1e6dacc2ccacc2dd9702bceb8c34908c205f80e855410082f01"}, {0xd0, 0x10c, 0x74, "2bbe1408be4c55b5793829ff81368217638683af65299db9c7006e8a2b643c73ab76fb6969f33da5ef6d17748284ab29eda6d5a6f4253ae717d4c6f2dae5f1564361b129840610125123c9d3801b335e62f1175be156745d305e5e7759438f1ebfe580673dbc2408b4f4c1d0f7d1935fc58cbab61d05bc665e4e70f9ac8deaf2d1076e1eae3f882e335b916bb9aeda764df7b543782290059f7b42ed0a3a495265aca6f4c7bc7cfc961aff7c4a34ebf820d31c9728e7ac2b19"}, {0xb8, 0x13d, 0x3, "7bd55ba8ff64f1839aae08298c1efefeea41390f65a387478556e22e870570b51310947240681b9f55d574d23453b00676231a4992ec0049ae3bd744bfa7ae6f1546b129f4f516dabd40f8d8bdffbbe0a1601ca536c248c98d48679f1f6bb5f1f93799ba601afdeaf1e5559a76414ddd25a39e2fabe3c4629f78f8d7c085935902771e7b5b6b3875eaeaf814d3eeb814960bc67955e5cea17c07b145ea2949fcde70bb4f24"}], 0x1f8}, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb04001800160011000586f9835b3f00009148790003f85acc7c45", 0x2e}], 0x1}, 0x0) [ 3468.285755][T15741] 9pnet: Insufficient options for proto=fd [ 3468.405932][T15739] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3468.405932][T15739] 12:49:21 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, r2, 0x0, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000380)='ppp0-]&-*\x92^\x8a\\md5sum\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000000f0000002500000000000000950000000000000095c7945faaaca77df7b091c97554bb677c101e46008000000000075900001943449fc1dcf86e0008d70000000000b1b5af027400005822e8f98b2b4077445b2fef3efdd4547d08d3f4215a73e8d9ffcd60ac4807eafef8a0e0a79ec8a07ce46fb7c53db16b29aa6d3ebc1107b9cf2a89a797cd5c578f00"/157], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x297ef) 12:49:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3468.530116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3468.535947][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:49:21 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:21 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 3468.802595][T16060] 9pnet: Insufficient options for proto=fd [ 3468.930715][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3468.936927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3469.045343][T16093] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3469.045343][T16093] [ 3469.420118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3469.425935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3473.090122][ C1] net_ratelimit: 16 callbacks suppressed [ 3473.095975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3473.101810][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3473.570179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3473.575993][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3473.970186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3473.976209][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3474.210092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3474.215899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3474.780116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3474.785981][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:49:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x7, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f2184b99c0a0000b88f63f841ba000000000f308fc978db1456c4c39dcfae05000000ba660f38810066baf80cb84892f780ef66bafc0c66edc4c19c54cc260f005c5e000f2057c4c2f9292b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 12:49:29 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 12:49:29 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:29 executing program 5: [ 3476.915817][T16299] 9pnet: Insufficient options for proto=fd 12:49:30 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 12:49:30 executing program 5: [ 3477.077343][T16298] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3477.077343][T16298] 12:49:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:30 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x7, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f2184b99c0a0000b88f63f841ba000000000f308fc978db1456c4c39dcfae05000000ba660f38810066baf80cb84892f780ef66bafc0c66edc4c19c54cc260f005c5e000f2057c4c2f9292b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 12:49:30 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x1d, "71ba3a9a24fb206898a023c6dfdcc21167b3eb1224f96f061ab8cee9a6"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) [ 3477.400592][T16411] 9pnet: Insufficient options for proto=fd 12:49:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x7, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f2184b99c0a0000b88f63f841ba000000000f308fc978db1456c4c39dcfae05000000ba660f38810066baf80cb84892f780ef66bafc0c66edc4c19c54cc260f005c5e000f2057c4c2f9292b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) [ 3477.864291][T16525] EXT4-fs (loop1): invalid inodes per group: 16384 [ 3477.864291][T16525] [ 3478.130098][ C1] net_ratelimit: 14 callbacks suppressed [ 3478.130130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3478.141586][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3478.370108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3478.375972][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3478.930129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3478.935934][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3479.330135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3479.335914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3479.810178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3479.815994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3483.490134][ C1] net_ratelimit: 16 callbacks suppressed [ 3483.490152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3483.501975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3483.980124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3483.985909][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:49:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:37 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 12:49:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:37 executing program 2: 12:49:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x7, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f2184b99c0a0000b88f63f841ba000000000f308fc978db1456c4c39dcfae05000000ba660f38810066baf80cb84892f780ef66bafc0c66edc4c19c54cc260f005c5e000f2057c4c2f9292b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 12:49:37 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:37 executing program 2: [ 3484.199444][T16642] 9pnet: Insufficient options for proto=fd 12:49:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:37 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) [ 3484.357971][T16641] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3484.370079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3484.375863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3484.426978][T16641] EXT4-fs (loop1): unsupported descriptor size 0 12:49:37 executing program 2: [ 3484.487198][T16755] 9pnet: Insufficient options for proto=fd 12:49:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(0x0, 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x7, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f2184b99c0a0000b88f63f841ba000000000f308fc978db1456c4c39dcfae05000000ba660f38810066baf80cb84892f780ef66bafc0c66edc4c19c54cc260f005c5e000f2057c4c2f9292b", 0x4c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(0x0) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) [ 3484.610082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3484.615884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3485.170121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3485.175923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3488.530126][ C1] net_ratelimit: 14 callbacks suppressed [ 3488.535808][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.541536][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3488.770118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.775926][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3489.330135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3489.335971][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3489.730117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3489.735914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3490.210180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3490.215990][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:49:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:46 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) 12:49:46 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:46 executing program 2: 12:49:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(0x0, 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:46 executing program 5: 12:49:46 executing program 5: 12:49:46 executing program 2: [ 3493.706698][T16777] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3493.773956][T16777] EXT4-fs (loop1): unsupported descriptor size 0 12:49:47 executing program 2: 12:49:47 executing program 5: 12:49:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(0x0, 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:47 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) [ 3493.890092][ C1] net_ratelimit: 16 callbacks suppressed [ 3493.890106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3493.901850][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.370154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.375953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.770127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.776027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3495.010112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3495.015898][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3495.570156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3495.575966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3498.930159][ C1] net_ratelimit: 14 callbacks suppressed [ 3498.935916][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3498.941692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3499.170117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3499.176053][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3499.730177][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3499.736022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3500.130113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3500.135909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3500.610139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3500.615970][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:49:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:49:56 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:56 executing program 2: 12:49:56 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) 12:49:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:49:56 executing program 5: 12:49:56 executing program 2: r0 = socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000480)=0x8) fchdir(0xffffffffffffffff) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) fcntl$lock(r3, 0x25, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffa, 0x0, r4}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='raw\x00', 0x2) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000004c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00"/120], 0x78) pread64(r1, &(0x7f0000000040)=""/49, 0x31, 0x52) ptrace(0x10, r5) wait4(r5, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000100)=0x2, 0x4) 12:49:56 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffbfffd) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:49:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(r4, 0x0, 0x0) [ 3503.160248][T16814] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended 12:49:56 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) [ 3503.204868][T16814] EXT4-fs (loop1): unsupported descriptor size 0 12:49:56 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00'}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:49:56 executing program 2: memfd_create(&(0x7f0000000340)='\x00', 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x7ffbf, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') [ 3503.745008][T17037] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3503.754233][T17037] EXT4-fs (loop1): unsupported descriptor size 0 [ 3504.290149][ C1] net_ratelimit: 16 callbacks suppressed [ 3504.290183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3504.301639][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3504.770162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3504.775990][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3505.170091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3505.175907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3505.410094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3505.415916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3505.970144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3505.975972][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3509.330106][ C1] net_ratelimit: 14 callbacks suppressed [ 3509.330120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3509.341633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3509.570114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3509.575955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3510.130108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3510.135989][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3510.530113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3510.535868][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3511.010126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3511.015894][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:50:05 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffbfffd) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:50:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffeffff}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:50:05 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) 12:50:05 executing program 2: memfd_create(&(0x7f0000000340)='\x00', 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x7ffbf, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') 12:50:05 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00'}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:50:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 12:50:05 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) 12:50:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 12:50:05 executing program 2: memfd_create(&(0x7f0000000340)='\x00', 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x7ffbf, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') [ 3512.569684][T17154] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3512.583533][T17154] EXT4-fs (loop1): unsupported descriptor size 0 12:50:05 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffbfffd) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:50:05 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00'}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:50:06 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) 12:50:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 3513.042752][T17273] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 3513.052232][T17273] EXT4-fs (loop1): unsupported descriptor size 0 [ 3514.690164][ C1] net_ratelimit: 16 callbacks suppressed [ 3514.695957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3514.701859][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3515.170236][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3515.176232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3515.570139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3515.576137][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3515.810146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3515.816158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3516.370140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3516.375959][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:50:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000300)=0x401, 0x4) r1 = open(0x0, 0x0, 0x8a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x8) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="7a4381fc8d29f8760b7c9218fa2a2d7fca8bae39689d2eb7f7eceaf0296d64aa"}) write(r3, &(0x7f00000001c0)="4cd53be33df50879ca7c767c81fab7504daff8c471eb7706072ee98aa76c6a0d81cb5fb79a7ba8c178106201073c25482d0664b920f5b092873afe54d0c0663777fbce25d5f8cfa4b24c0b8ca6eed3413ad48fd7ce88a5c5507aae0533e5063aea09e2592ef81b89ee4e3899a86b10a8", 0x70) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x19, 0x7, 0x1, {0x10, 'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}}, 0x19) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) lseek(0xffffffffffffffff, 0x100000000000000, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:50:12 executing program 2: memfd_create(&(0x7f0000000340)='\x00', 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x7ffbf, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') 12:50:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) 12:50:12 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0xf, "71ba3a9a24fb206898a023c6dfdcc2"}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 12:50:12 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffbfffd) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:50:12 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff2180100008003950323030302e5c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 3519.740313][ C1] net_ratelimit: 14 callbacks suppressed [ 3519.740329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.752235][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3519.860555][ T7271] ================================================================== [ 3519.868827][ T7271] BUG: KCSAN: data-race in list_lru_count_one / list_lru_isolate_move [ 3519.876977][ T7271] [ 3519.879323][ T7271] write to 0xffff8880a79d8410 of 8 bytes by task 17402 on cpu 1: [ 3519.887050][ T7271] list_lru_isolate_move+0x127/0x160 [ 3519.892347][ T7271] d_lru_shrink_move+0x9e/0xc0 [ 3519.897120][ T7271] dentry_lru_isolate+0xb0/0x1a0 [ 3519.902067][ T7271] __list_lru_walk_one+0x110/0x390 12:50:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) [ 3519.907185][ T7271] list_lru_walk_one+0x84/0xb0 [ 3519.911957][ T7271] prune_dcache_sb+0x8a/0xc0 [ 3519.916561][ T7271] super_cache_scan+0x1d1/0x2c0 [ 3519.921417][ T7271] do_shrink_slab+0x2b6/0x5a0 [ 3519.926104][ T7271] shrink_slab+0x46e/0x540 [ 3519.930528][ T7271] shrink_node+0x1ad/0xb30 [ 3519.935131][ T7271] do_try_to_free_pages+0x242/0x940 [ 3519.940335][ T7271] try_to_free_mem_cgroup_pages+0x1fd/0x4c0 [ 3519.946327][ T7271] reclaim_high.constprop.0+0xf7/0x140 [ 3519.951793][ T7271] mem_cgroup_handle_over_high+0x96/0x180 [ 3519.957674][ T7271] [ 3519.960010][ T7271] read to 0xffff8880a79d8410 of 8 bytes by task 7271 on cpu 0: [ 3519.967872][ T7271] list_lru_count_one+0xbd/0x130 [ 3519.970089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.972923][ T7271] super_cache_count+0xde/0x1b0 [ 3519.972939][ T7271] do_shrink_slab+0xb7/0x5a0 [ 3519.972950][ T7271] shrink_slab+0x46e/0x540 [ 3519.972980][ T7271] shrink_node+0x1ad/0xb30 [ 3519.978874][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3519.983682][ T7271] do_try_to_free_pages+0x242/0x940 [ 3519.983695][ T7271] try_to_free_mem_cgroup_pages+0x1fd/0x4c0 [ 3519.983711][ T7271] reclaim_high.constprop.0+0xf7/0x140 [ 3519.983722][ T7271] mem_cgroup_handle_over_high+0x96/0x180 [ 3519.983736][ T7271] exit_to_usermode_loop+0x20c/0x2c0 [ 3519.983762][ T7271] do_syscall_64+0x353/0x370 [ 3520.035377][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3520.041263][ T7271] [ 3520.043597][ T7271] Reported by Kernel Concurrency Sanitizer on: [ 3520.049758][ T7271] CPU: 0 PID: 7271 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 3520.057742][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3520.067890][ T7271] ================================================================== [ 3520.077328][ T7271] Kernel panic - not syncing: panic_on_warn set ... [ 3520.084016][ T7271] CPU: 0 PID: 7271 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 3520.091952][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3520.102215][ T7271] Call Trace: [ 3520.105614][ T7271] dump_stack+0xf5/0x159 [ 3520.109866][ T7271] panic+0x210/0x640 [ 3520.113774][ T7271] ? mem_cgroup_handle_over_high+0x96/0x180 [ 3520.119686][ T7271] ? vprintk_func+0x8d/0x140 [ 3520.124417][ T7271] kcsan_report.cold+0xc/0x10 [ 3520.129112][ T7271] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 3520.134673][ T7271] __tsan_read8+0x2c/0x30 [ 3520.139160][ T7271] list_lru_count_one+0xbd/0x130 [ 3520.144147][ T7271] super_cache_count+0xde/0x1b0 [ 3520.149016][ T7271] do_shrink_slab+0xb7/0x5a0 [ 3520.153705][ T7271] ? radix_tree_lookup+0x33/0x40 [ 3520.158661][ T7271] shrink_slab+0x46e/0x540 [ 3520.163094][ T7271] shrink_node+0x1ad/0xb30 [ 3520.167537][ T7271] do_try_to_free_pages+0x242/0x940 [ 3520.172760][ T7271] try_to_free_mem_cgroup_pages+0x1fd/0x4c0 [ 3520.178673][ T7271] reclaim_high.constprop.0+0xf7/0x140 [ 3520.184263][ T7271] mem_cgroup_handle_over_high+0x96/0x180 [ 3520.190005][ T7271] exit_to_usermode_loop+0x20c/0x2c0 [ 3520.195312][ T7271] do_syscall_64+0x353/0x370 [ 3520.199922][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3520.205938][ T7271] RIP: 0033:0x4584ca 12:50:13 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0x4) 12:50:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) keyctl$join(0x1, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) inotify_init1(0x80800) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x4) [ 3520.209851][ T7271] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3520.229464][ T7271] RSP: 002b:00007ffc379ce560 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3520.237881][ T7271] RAX: 0000000000001fc5 RBX: 00007ffc379ce560 RCX: 00000000004584ca [ 3520.245949][ T7271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3520.254722][ T7271] RBP: 00007ffc379ce5a0 R08: 0000000000000001 R09: 0000000001e1c940 [ 3520.262706][ T7271] R10: 0000000001e1cc10 R11: 0000000000000246 R12: 0000000000000001 [ 3520.270814][ T7271] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc379ce5f0 [ 3520.281023][ T7271] Kernel Offset: disabled [ 3520.285372][ T7271] Rebooting in 86400 seconds..