uxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8})
mq_timedreceive(r6, &(0x7f0000000080)=""/60, 0x3c, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x400, 0x1, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r12 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r12, 0x12, 0x2, &(0x7f0000000400)=""/248, &(0x7f0000001580)=0xf8)
fallocate(r8, 0x0, 0x0, 0x1000f4)
setsockopt$packet_buf(r8, 0x107, 0xd, &(0x7f0000000580)="543a90008e4f2dac833f6e8c5f6381750c90bf4fb1a5e07b1a49fa1a071d43f1492908863af3da4bc5b471500511d176ff50811cbd6d8f85984eaa3dd2f13bc74d3b05630b564bec8460d04062ae3927fb569ac1570a688feb1fdff05d510d2781d1926f47eaf3aa7a142a8dac48b8d76c899ab1df2afc4b48f7e6b41c22d67daca32e4c958194c93a57c6552c463d0310fa5d9487c86b6ffb0c8039c6eeba002130f1092393ef8302a395b74906cba975d9509dd5ceaa159627832219de3c089a1eecacdc860de45c7d80883b8d1edcdbc9e2eda3ee66b92005a9a640892e6d974d586bc1c39dfcead585fb1dfd3a0c56ec7d910eb41e8a427ef33207cb7a5db63a8f71016f20fe64fb90aa85d729b3d120a5bd6ea31e4f9e0db813b857cc02de64c8fbd9da041642f869a6874b1c0a0f29cec8afe614ff6a408f6ab1c7cfdbfab7ea2256c9ce589a71202971d5e0d78aedeb64ac4c50a83b3648645a4562eaea385ee8d67a7a707117dcd80363206f332476582cec6f50eede133e020d090a20f72668eb5fbbdd71c5fd49121e7794a92c68712b6cec069bd92c92a31040c1e0299b5592985cebb8af4c2fc1410e0d95c44e2da70fc9ddebb7ca9ae02a4b21b97937ecfa48d66a42d3ccdb5a4a6cb12b568736604e5b6ba8143d3cb7a01a95191348d1370b25a1ae91366561de65e82042649cd068da86bda4834f012956107a2164bbf58c4df999d532d72b0ee18146562d9e92811473f9efa9a720a8304763b10f39944dfbac207463aa633e66b078c15e09d1d9dffd54e1e22f1a73bd3e79a028048a85df203e0949b707d7cc1601acb88f1f107ff85a251fe9dd7e5335111aee7ab3d9f9d4e7aac3a8c8dcba6f7ba988108eb7f695ba6c31e3f5475569983babb14c063834045f2f1850d383085ba213e4d67be4532b1c02cf3b4de5c4d0af8f74c8775971666b1a8e41dd383b187aeaf260fa28470b989fa981cf6890de283396189ab944f2164477e39801b8ab532a1617f6941f622987e9fe31c8195459a31db8f41896c26f696a83f4a42a8f77a7cf99a27b21ad2ecafd531bdf8718114b882fbfebdc2a525bcc55ccd3cce9cbbf3a899fa2e4211cf84cb667167c9f330309249f6671f07a77e5343e850c10459eb228fb071cb2c91aa43391acfefdd12d20cc6fd6cad2dadd002c5580132af63137b8a810219e323b508281348350901ebaff3f0fe4f4ebcfa5c107312455b7d85c1ed22997e29fbe7bff95de99d444a561ea92ce388d2312b92f1251649266045a986106a27593cae0e020ae7dc045c56aada4d47fc54c4574a41c246fb1bb133cc0181f95a8afd074d4a4c722747662c16ddb6b995fe870a30ca13e9cb455815f8387eba82205554684eca322afd2bc1676d2d305e45f73990775c67245bdcbce8aa5fbb46fee020d7bc3b584532acd3a67f68e33d1f95e8c3f6229754b663ff398f99cd793f4ed3cf6a1ee8c4521b8b9826009e5b8eef85297221941d227696358800b0f852eb72e854ed39f205817d5be4d9cb5ade92e7b839979cc40626dfd88a7f5936e562ade298366fa358fb226c406a2a9f7d10a665f64027bda7e2fb13b14b209d39d92ef4df14e95d665f06daa197f490b454921ba6645575b324d773aca8f23196f532d2cec50ca05bb6a8fe0778145acbe4bd1b7ad36af2a78d5e47b2c9d2ea4e43623f2f851368a9f35c716b9ed06406b5799508e1343cbfc87f1786370250691cb66eb620bd7d86007cd65bbbcef08521ea51a08f5fec5c3b692915a26ff22e72eaee7ed399621d5319345e3166120897c43eab3ffceff3d1d2d34903e99cb71a3e05ba7f2089e7efd578e523e8eedd86bd0d5f85999e07038cfb0167f6c0e3fd7f6845f3b6e9b754522587116cd7eef983a222a786216c827b178396f4ae477e78297622192de8ceb9dbc74841fe6ca227fabfd4f50c6f4c93cc566ebc4c6ef1dc0ce75e0a2aedd885351a185a2834b83c62dd3fe5edb74171868b135311326ea7db36664422888531ae6119462fdf66f8083ac007ac136f22337f0992077e70fcd52ec3187404932d4238a11911a738af72b241da7ee63fc53993f51cfa6fee7572e2f27e787715d7183469bfd49184afb783cc69d3edcba9f2e6c5e3183d232fec5c885b5438a2d633765d9eb4b675bd3ca0c5deb523411f1ac6579bf11f0fd50e8b2d5734561fe8a099f299d813b15b0819a44a65d1fde80df79fa6194421ff0bc781b096b9c86aea2831c64cb81d9df6b4ad1812b6744cfc7542585bb81fc13fdd8aecc8de4028fa7066c4044420426e4c0d86cf81e7f8397594b1814d3061921998995727eae4b9ccf4ba3b2be42b5e2e7b7b3ca1841e1d45cb00bd13a79091401721eb7f24ad6660566e21b41a16d172d33a4a59685dbc2dba403b827d59903e9a7350a735db62ada9a90f1824e6e3155670b0570fa6ee9d693e52fac63d7e97ab9f30cdfd0a66d18895c15f020a1bd7386831ad5e8983b1369b56d9c4677e7c807cc59a96c9b16b0b10af0cea3eaacfc78b02e196ea990d4947ed0828b4ecb1c42e88b88fc28ab9a6bb92b68894edffbf5a16fcc5277ed79c5302e4da200128c721c0664ec443c9b6802b3b2e839f8b276e0cc212e1709c8833e4bfa30c0cda4e0f3565cfb8ab3deb6450f37c5e7c6fca7ad0aaa11371fe5a037b1e8225fced6c876ebf6760dd5d5e838f180a3db117b326905aa4e5e621c3b59e38ab4c6141e5653290f3a9a52ea292ffb69759c338d6489e6dfa3c20fd5504b5a02c338d038bf12319033424f47fb8acddba78096533a6d2ad3af231d159f61800f421de412f815e98dc34b106f791730b27390abe7d8946724f83858a24a9c82ff6ed40721b6af0b6df0cfa9d07667acdc1cc923e843c8024bcca38bb0d029f2009bf6d6dd84b9fa61ee9233a265aef15a79b672e8c3314b87dc9568fd6a12b812bfb77e07e37d12cd3ed6be89770e4979481a3dd92ab0f9c1041bb09acdecd5e5b1ae027e68ba6afa85657de3b4cfa6a6cdfbcc2a8f3327684ea7ef2c9ec7360d88ad999b6fec0f09341ad749832273c798a4fa127d2695ca765587d0367c7b107060532d849d058c59f0e27f8007dbbd6a1f11e69f81ba6dde01ee7770e4b1f87c7275e25af16de96f4bc87b16958e5e29a8f8a8a5b830b013cb9b9b5f0f5ed4f4c91920e8acecd81e4bf368b9511fc3c425049cc5c22d2b6e97a7c17a4a52aabc88921d069087b1fa5f3dbe8566de246d85013bc65b459149b2ab4ed32e8f817620b3cb1e4d3b6002f67e2640c1ab406fcd4b3de98a29f4d0d769c787945b543263302bdcd0101b2e49aef1597f02d8b37c2b058afd52fb6579ea283fe4aa8ff030e345a58359655c1acb61a4beba78d05daa7b2f96d3d9a3153a1161855132f498170f121bbb2391fa425be6c92fbf5c68a88e3ddfb8628022949c79b27016c7aa316d2f848b820eb2f1efd3ea2f634a6913ca0d51bf34a363b965becb010b7e37c4f2d9f6ddb6f891e0a4bd7f1c76df436f1c8f649b7e208f3069b3c87db1bef77ec11e91aea7bee9a183d3508f01af06444c89ee573a3781682fc29cdcd48ad9435befeed168c6c182d1f175b3c747ef16f6a6ed6f2a7409348e0ae069a25c3dbec04df7ec79d399f9a6d8a00936020c73ed394820eb841f0c1d87c1d0ee5d53df4353d217ed40e046e2deb747cfe5dd4b09c044f4095386ecf98edc7f70acbb9ee2b4966b42cb0f4a608febc1c7591418270da8cf2609e8cb9b8b96be566ea63a2f3529f7c16bd7b89fbf53e0cae96781db415ea297b9f9f7ac6d9fdbee77da6f8c0b50acf6393eac0caac22bb83005845b1d28458f9dbf4dbedba8cfe0114ce77b85784b449920476d346472ce074b625425015f2c5de8be7e6bf38da52378dfdf099f6dd099f8d8b48b278f1555b90afbe7b45b25fc45b9d8004e61ff620333c9ea8f7ab02a1a00e9369e5946f49bbfe2dcaa5caf6ab539f3b5a26e303abcd170e713d7de763c854b23983e924a55e563797ea800456f3459b53774feff1c2c5b9925213f377788c56fa784951362f0a50581fe8685e8a2c12d3162035777fb519947f6ef689145715f6d01edf6aef6653dfa27b4f5765d1d8e1e6d37e70cdf36744908d21c880f0b5c36d72d24bae424b95f1dc899d59e3f341ba8132d1a925dab5279d0e167ea512b6f788f6ba3dffa895e4b12702367ecf055521ce9144a29df768ea2aa6821f17c9621a03ebcc816115851ef5ad432a8f3869767671e5b756fe025f0269f43a5479bb3e90dcb071cbfc101eef32e945266fb3d57c08726397f723669d8ed348cc22fb2ab6975ce401aa9c41e14e37fbeb538aad77eb88d99d9ba6055414a59f672d1184d73a9d961d58392f86da7a63913a049fd89c81704f5272566e9e6f308aa443924044468b64af05f59c19fa64b614b7b0f6e56bddf93d7e9c44808b99337e1f8a9f36e6ea23f09726af99d204f51c90f5d2ab46e445d2a74fb4eef1c36be98556f445af9187f95358df129a596cd2d24358103fe37f6d14c5da8e0b87df77cea8df1782353a2a05bcd56cd61792eabe0244a0a859490f5a11621bb83f6d7b21cab30023b58d1ae9c978b7503ac883bec904679ebfd3f091abdc61273f2fcd35180cee9f99cd31178dfe91e4bb144238a2bc37d58136c6bb83a2da03a3f1592b46e5c44e24461c502d32825ac10349210c3f750f053b866ee5d3e5b51b4232706b122e00cb39b39e6be3d00c9c5ea00763bc55389e20043532cf0465b3161a3b69fb694c4feb8504d22aba2bef3560b449b28380d5346c4a18a73c189dde9bb926faa2e399a8af087537981fb6e35a5123266c4de55b516e8e8a77fe843e8905b5ab31018e7c2052ab96b8249d26d3396558b71b6933ea1d56c047aee153e52c2389871a904b8f557d2454aa1e5ae59804205eccabd9b988fc35e9b3fc0e72f98d6d34170c38fb8aa968d7ed8111545ea04b81039b0a2da80b91f9a8160e36069104a2b9da45c5dd1b4926551a80da4e77e9a6147a5ee4ce25947d4707720bcb2f6cea377e171b87d295d948c2b9467ae9e82a76ec2bbef68ac3b491629a656324e7fc06702ac0a5648317104453bba8f6ecf7d567c93c0290d5e80a611609de98407cd6f48a40231475a8598c22d9ffa7626ddcd4471eeba250fe02f802309b7ad11f67828fc0ae2b56ef3803e159393102838c71354eb45c89ed3786e404df286dc4025b3d8480e55904db8fce3318de523cb140d0fe86c139f5e8af317a6579b9af42801849dfa960babc55061b961308e56513cdba1baa0daffddd9c7a70373b0738e0ac70d0288607eeb9189f68dc38b4286cded03b3f886a9b497a96bb42f5eb229b846d76872e3c5314e8d0796ea1449629475a9bb7a944ae34925f832d8f7beb4e9454a193927a84e9e2301e1fd00533808d713cf9fe4e18b63ddb113dfa0beff40715887f3213ff69f6493e679c76bbda60bc6c71c5ba56300188c3b5d57c91a298e0ca0132caa32eb34ebc8ac015fe0dcb35d3d5fe795c4ae54e20d57bb09212e0973c1e34abcf0641233ccaffe0149318feb682111c0a8a4661c44b5f135eb624c3ba982c96799626eb789b8d9652226f62c75ff9ceb7e199f9ad14479e7cacc5e5c0a17b65e52e1ff5b4280d3a7476ec525286e589488ae0cf3290c5ec8f0dc2d62f43421d56d137ed9d96a378fc94420aff6a90849c2d321e55141d3a42a48d318bd1e7acf7c22ca40c140a01545675a1b", 0x1000)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

11:02:20 executing program 5:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r9})
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
dup(r11)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2})
r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r12, &(0x7f00000001c0)={'syz1\x00\x00\xff\xff\xff\x94\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4202]}, 0x45c)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r12, 0x5101, 0x0)
getsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000880)={@loopback, @broadcast, <r13=>0x0}, &(0x7f00000008c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000ac0)=0xe8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={<r15=>0x0, @local, @dev}, &(0x7f0000000b40)=0xc)
r16 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2})
r17 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r17, &(0x7f00000001c0)={'syz1\x00\x00\xff\xff\xff\x94\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4202]}, 0x45c)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r17, 0x5101, 0x0)
getsockopt$inet_pktinfo(r17, 0x0, 0x8, &(0x7f0000000b80)={<r18=>0x0, @remote, @empty}, &(0x7f0000000bc0)=0xc)
r19 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r19, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r20})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000cc0)={@mcast2, <r21=>0x0}, &(0x7f0000000d00)=0x14)
r22 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
r24 = dup(r23)
getpeername$packet(r24, &(0x7f0000000000)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r22, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r25})
r26 = socket$inet6_udp(0xa, 0x2, 0x0)
r27 = dup(0xffffffffffffffff)
getpeername$packet(r27, &(0x7f0000000000)={0x11, 0x0, <r28=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r26, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r28})
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r29=>0xffffffffffffffff})
r30 = dup(r29)
getpeername$packet(r30, &(0x7f0000000000)={0x11, 0x0, <r31=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r32 = socket$inet6_udp(0xa, 0x2, 0x0)
r33 = dup(0xffffffffffffffff)
getpeername$packet(r33, &(0x7f0000000000)={0x11, 0x0, <r34=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r32, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r34})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000000c0), 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="34060000", @ANYRES16=0x0, @ANYBLOB="210027bd7000fcdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="f80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000008000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="c800020054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400000040029dceffff040007010100000000084004070000000008077f0300000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000008000100", @ANYRES32=r13, @ANYBLOB="6002020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff0c000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004008ccaffff08000600", @ANYRES32=r15, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300e3661f050000001000040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004001006000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004004e0e000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004003f00000008000600", @ANYRES32=r18, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040009000003ffffff7f08000100", @ANYRES32=r20, @ANYBLOB="7c00020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040002000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff01000008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8c0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r28, @ANYBLOB="8000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r31, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r34, @ANYBLOB="400002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0], 0x634}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz1\x00\x00\xff\xff\xff\x94\x00', {}, 0x0, [], [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50788831]}, 0x45c)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0x5101, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x800})
r35 = socket$kcm(0x29, 0x1000000000002, 0x0)
close(r35)

11:02:20 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000340)='squashfs\x00', 0x200000, &(0x7f00000003c0)='batadv0\x00')
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x2000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, &(0x7f0000000380)="24000000580001000000f4f9002304000a04f511080001000201009f0800028001000000", 0x24)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x1a960c876daf944a, 0x400000000000007, 0x7})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Cs'], 0x3}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x1000000000000, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x9, 0x4, 0x0, 0x0, r7}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r8, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r8, &(0x7f00000001c0), 0x0}, 0x20)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa3, 0x7b9, 0x7}, &(0x7f0000000300)=0x10)

11:02:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'h0r0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:20 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0xfffffdc3)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r2, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x1000}}, 0x2, 0x2, 0x4000000, 0xffff, 0x2}, &(0x7f0000000180)=0x98)

11:02:20 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r1)
r2 = socket(0x10, 0x2, 0xc)
write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
splice(r3, 0x0, r1, 0x0, 0x80000001, 0x2a6cd292edbb96e0)

11:02:20 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0xfffffffffffffcf2, 0x0, 0xe8, 0x0, 0xe8, 0xe8, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'eql\x00\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', {}, {}, 0x33, 0x0, 0x50}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffea7)

11:02:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hXr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  976.390750] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:20 executing program 2:
capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000040))
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendfile(r1, r0, &(0x7f0000000040)=0x100060, 0xa808)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, 0x12, r2, 0x97f18000)

[  976.440356] protocol 88fb is buggy, dev hsr_slave_0
[  976.445572] protocol 88fb is buggy, dev hsr_slave_1
11:02:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
ioprio_get$uid(0x0, r3)
ioctl$KDGKBLED(r1, 0x4b60, &(0x7f0000000200))

11:02:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hcr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:21 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
getresuid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)=<r2=>0x0)
setuid(r2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x610081, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r8=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0xd}, 0x80000000}}, 0x1, 0x3, 0x6, 0x5, 0xa}, &(0x7f00000001c0)=0x98)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x1}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r8, 0x80000}, &(0x7f0000000080)=0x8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe00)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)

11:02:21 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r7, r6)
r8 = dup2(r1, 0xffffffffffffffff)
r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80801, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick=0xffffffff, {}, {0x10}, @addr}, {0x0, 0x0, 0x0, 0x0, @time={0x5, 0x10000}, {}, {}, @addr}], 0x38)

11:02:21 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(0xffffffffffffffff)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x3, @raw_data="f00a74cf6465b88e1b551aa14ef4ee5695672d940afcb6e8377c3ceb6878f381dc378c68bf5a2b73d74bf7da9c1704b5b05c9a71c64736f37191d2c7dfa4f5adac438f51da26fefd2e827a0f8cd93460601454ad42b8e166b325b63c2a4a23d1ce49a45dab74e0398d9ccfe96e363c8cce45a6af302749fe9a5761b706627df90f3bb1eb4f0f35ed1c709f0513b0f9a16a4d61f8e868487d6c75b87a61c45225124ce06f1850c8586f9c0228ec347aa8066460a9d9e3dacc4afcf1f59e12f3a0cab5d90a34199237"})
r2 = socket(0x10, 0x2, 0xc)
write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

[  977.199754] Unknown ioctl 16712
11:02:21 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340), &(0x7f0000000400)}, 0x20)

11:02:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xa00000, 0xf648, 0x7fffffff, <r5=>r3, 0x0, &(0x7f0000000100)={0x980919, 0x1, [], @value=0xc2b}})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x4d0000, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xf0}, 0x100)
r7 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
accept$alg(r7, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, &(0x7f0000000040))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x4, "820d9d0be200572b"})

11:02:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hdr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  977.293970] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:21 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'bond_slave_0\x00'})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="e297ad9a06000a00900403000056b8c96824", 0x12, 0x400}], 0x0, 0x0)

11:02:21 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
syz_mount_image$jfs(&(0x7f0000002640)='jfs\x00', &(0x7f0000002680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="066d61336b3d30"])

11:02:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hir0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  977.543265] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  977.597921] jfs: Unrecognized mount option "ma3k=0" or missing value
11:02:22 executing program 3:
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x294}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000240)={0x40, 0xc, 0x4, 0x21000, 0x9, {0x77359400}, {0x1, 0x0, 0xff, 0x1, 0x8a, 0x0, "9b3af0a0"}, 0xa57, 0x4, @userptr=0x5, 0xfffffffe, 0x0, <r4=>0xffffffffffffffff})
r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r6 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xbb)
setresuid(0x0, r7, 0x0)
r8 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xbb)
setresuid(0x0, r9, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xa0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@privport='privport'}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@access_user='access=user'}, {@mmap='mmap'}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@measure='measure'}]}})
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0)

[  977.740530] minix_free_inode: bit 1 already cleared
[  977.746908] jfs: Unrecognized mount option "ma3k=0" or missing value
11:02:22 executing program 2:
r0 = socket$tipc(0x1e, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000001c0))
io_setup(0x1, &(0x7f00000001c0)=<r4=>0x0)
io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}])

11:02:22 executing program 5:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000380))
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8)
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000140)={@empty, @local, r8}, 0xc)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000900, 0x20000930, 0x20000bb4]}, 0x78)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x3b9}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe)

11:02:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hlr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:22 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2})
r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r1, 0x0, 0x0, 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r7, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x1a10ce9c}, 0x8)
r8 = dup(r2)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r11, &(0x7f00000002c0)="ea869c67886316e16be4af9bc515a06ab3cd76fab981f18fe53cd1f7635667ff8d2b794e43853ccfebcbd733e6302d9a5ebbbe12cf7c7a5930b2c998305118bd8f3a9990e4e6ca4750b1a566278dca196877004bc84d210ea9a82952dcc90c43c219ee76a5319e35c042f1ff4ac41f5bc2fa9aaba2534159f78f3b77d7eaf6ee0fd4dd819cd681ebd6692bcb6f9899b8ad282d2be5e2178ed1b827f41e33d711a62b8a20594aef4eecd10c14aa1e55e1307075316ba988d26367132feb6aa93680320db3de5b02924396440e1312493b230d27eca6373b2d471fe92ab2f76e4db7d1efcfbf03f52ed097bfcad017234a7bf8e316d8ca229a77", &(0x7f00000003c0)=""/231}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TUNSETSTEERINGEBPF(r0, 0x400454dc, &(0x7f00000000c0))

11:02:22 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x20000000, 0x0, 0x0, 'queue1\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x02\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'})
write$binfmt_elf32(r4, &(0x7f0000001d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xfa, 0x2, 0x5, 0x2, 0x0, 0x3e, 0x9, 0x8e, 0x38, 0x172, 0x7, 0x0, 0x20, 0x1, 0x1, 0x401, 0x9}, [{0x2, 0x2, 0x4, 0x6, 0xffff, 0x3, 0x101, 0x2}, {0x70000000, 0x3, 0x0, 0xfff, 0x7, 0xfff, 0x53, 0x32}], "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a78)
close(r2)
r5 = socket(0x10, 0x2, 0xc)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ptrace$getsig(0x4202, r9, 0x9815, &(0x7f00000002c0))
r10 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000040)={0xa20000, 0x400, 0x1000, r10, 0x0, &(0x7f0000000000)={0x980927, 0x1, [], @value=0x19f8}})
write(r5, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  978.485068] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  978.614631] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:23 executing program 0:
pipe(&(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)
fcntl$dupfd(r2, 0x0, r0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
dup(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
dup(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup(r7)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/validatetrans\x00', 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
dup(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
dup(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
dup(r10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
dup(r11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r14 = syz_open_dev$sndseq(&(0x7f0000000140)='/dem&7\xc1!\xa7+eqz', 0x0, 0x80000)
dup2(r14, r13)
dup(r13)
dup(r12)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/d\"m\\\xb9ull\x00', 0x88400, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0))
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$dupfd(r15, 0x0, r16)
r17 = userfaultfd(0x0)
ioctl$UFFDIO_API(r17, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r17, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r18 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r18, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r19 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r20 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r21 = dup2(r20, r19)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r21, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_SIOCETHTOOL(r18, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[]]})
r22 = dup2(0xffffffffffffffff, r18)
dup3(r22, r17, 0x0)

11:02:23 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
get_mempolicy(&(0x7f0000000200), &(0x7f0000000380), 0x8000, &(0x7f0000ffe000/0x2000)=nil, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0)
memfd_create(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x2b}}, {0xa, 0x4e21, 0x9, @mcast1, 0x3}, 0x101, [0x6, 0xfffffffb, 0xfffffffe, 0x3, 0xed, 0x0, 0x7, 0x5]}, 0x5c)
fdatasync(0xffffffffffffffff)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7}, 0xd8)
bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r5, &(0x7f0000000240)="1b", 0x1, 0x8000, 0x0, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r9, r8)
close(r0)

11:02:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hor0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:23 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0x9, 0x6, 0xde53, 0x0, 0x7fff, 0x80000000, 0x1, 0x1]})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000540)="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", 0xd00, 0x100}])

11:02:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100))
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
getpgrp(r1)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
wait4(r2, &(0x7f0000000800), 0x6878e90e41e312cd, &(0x7f0000000600))
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
connect(r3, 0x0, 0x0)
io_setup(0x60, &(0x7f00000002c0))
gettid()
sendmmsg$unix(r3, &(0x7f0000003f40), 0x0, 0x0)
pipe(0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x20000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000006c0)={{0x1, 0x0, 0x7, 0x0, 0x9}, 0x4, 0x1000, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x8000, 0xffffffffffffff14})
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n=', @ANYRES32=0x6, @ANYBLOB="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", @ANYRES32], 0x48}}, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000050000000000000018200000", @ANYRES32=0x1, @ANYBLOB="00000100051000009504000000000005"], &(0x7f0000000180)='GPL\x00', 0x0, 0x9f, &(0x7f00000001c0)=""/159, 0x20700, 0x5, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x200000, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={r7, r6, 0x3, 0x1}, 0xffffffffffffff6d)

11:02:23 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x7, 0x3, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  979.571491]  loop3: [CUMANA/ADFS] p1 [ADFS] p1
[  979.576324] loop3: partition table partially beyond EOD, truncated
[  979.600216] loop3: p1 size 2928270050 extends beyond EOD, truncated
11:02:24 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x4)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
openat$cgroup_type(r5, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@remote}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback}}}, 0xf8}, 0x8}, 0x0)

11:02:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hpr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:24 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x19, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3, 0x0, 0x0})

[  979.759715] batman_adv: Cannot find parent device
11:02:24 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000002300)={&(0x7f0000000080)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000100)="d2", 0x24549}], 0x1, &(0x7f0000002280)=ANY=[@ANYBLOB="200000de4720ff85640000000800066803c29b00003a225e3c4beb2e87d60000"], 0x20}, 0x20010010)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=<r5=>0x0)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x400, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x2, 0xa, 0x2}, &(0x7f0000000240)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r5, r6, 0x0, 0x2, &(0x7f0000000140)='$\x00', r7}, 0x30)

11:02:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hur0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000380)='./bus\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:02:24 executing program 5:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90b, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r7, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000002c0)={<r8=>r7, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x1000}}, 0xffffffff, 0x62, 0x80000001, 0x4ca5, 0x6}, &(0x7f0000000180)=0x98)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r8, 0x1000}, 0x8)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x14})
syz_open_pts(r9, 0x0)
r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r11 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r12 = dup2(r11, r10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDRV_PCM_IOCTL_REWIND(r12, 0x40084146, &(0x7f0000000040)=0x20)
syz_genetlink_get_family_id$team(0x0)
ioctl$BINDER_SET_MAX_THREADS(r10, 0x40046205, &(0x7f0000000100)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40600)
pselect6(0xd, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x800000000001ff}, &(0x7f0000000200), 0x0)

11:02:24 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
socket$inet(0x2, 0x806, 0xb)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x2)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r3 = memfd_create(&(0x7f0000000100)='queue1\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x1)
r4 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/aexec\x00', 0x2, 0x0)
dup3(r0, r0, 0x80000)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x8000, 0x0)
r9 = dup2(r7, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r10 = memfd_create(&(0x7f0000000600)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r11 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r12 = dup2(r11, r10)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)={0x0, 0x3, 0x4, 0x40000, 0xff, {0x77359400}, {0x3, 0xb, 0x6, 0x2, 0x3, 0x4, "da2cf518"}, 0x0, 0x3, @userptr=0xeb2a, 0x7d91c06c, 0x0, <r13=>0xffffffffffffffff})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r13, 0x78d41000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffffffffffff6, r15, 0xa0b}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400088}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r15, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008002}, 0x40000)
r16 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r16, r6)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r16, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000000)="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")

11:02:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hxr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  980.198351] overlayfs: filesystem on './file0' not supported as upperdir
11:02:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800004000e004, 0x0, &(0x7f0000000140), 0x1401, 0x0)

11:02:24 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hs\n0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  980.421216] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0xffffffffffffff0c, 0x767}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x7)
semget$private(0x0, 0x3, 0x80)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x10000}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @local}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x2}}, 0xe8)
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000100)='./file0/file0\x00', 0x6, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000180)="5992b27f3704b368dee2cb64fdc08664467bc36bdb2e7f495e9e42", 0x1b, 0x1}, {&(0x7f00000001c0)="618ebfac083ca509721753b013e8a71380829126f87a2ce3e156dc71eacebe7896be74754452", 0x26}, {&(0x7f0000000200)="52909a931fa4066aca5ec6f8701952dbcc9b431b608adac3d1007eeab2df278d71fdf43d73d7f2c79ac3e27794393be7f517acb8fcaa4bdcd4d87435abe85f9d9ccd2ac8ad", 0x45, 0x20}, {&(0x7f0000000440)="17bcef4b121502d857396fcd9abe894ebc6ddae68f5e2d7b301119569dd95dd0f966c7462643694ed599629eadafc153c9173567a24083398f48177018c1efd84ea9347cdee967da", 0x48, 0x2}, {&(0x7f0000000280), 0x0, 0x71}], 0x0, &(0x7f0000000580)={[{@discard='discard'}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@usrquota='usrquota'}, {@umask={'umask', 0x3d, 0x7ff}}, {@nodiscard='nodiscard'}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]})
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

[  980.514762] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hs%0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  982.783824] IPVS: ftp: loaded support on port[0] = 21
[  982.848413] chnl_net:caif_netlink_parms(): no params data found
[  982.875696] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.882239] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.889262] device bridge_slave_0 entered promiscuous mode
[  982.897637] bridge0: port 2(bridge_slave_1) entered blocking state
[  982.904723] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.912299] device bridge_slave_1 entered promiscuous mode
[  982.927634] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  982.937892] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  982.955893] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  982.963524] team0: Port device team_slave_0 added
[  982.969150] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  982.976668] team0: Port device team_slave_1 added
[  982.982196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  982.989675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  983.042278] device hsr_slave_0 entered promiscuous mode
[  983.080843] device hsr_slave_1 entered promiscuous mode
[  983.141090] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  983.148266] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  983.164804] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.171207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  983.177780] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.184168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  983.219892] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  983.226042] 8021q: adding VLAN 0 to HW filter on device bond0
[  983.235907] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  983.245368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  983.252868] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.259609] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.267054] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  983.277463] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  983.283833] 8021q: adding VLAN 0 to HW filter on device team0
[  983.301559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  983.309147] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.315534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  983.323731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  983.331688] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.338016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  983.351866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  983.359610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  983.371524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  983.385437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  983.395658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  983.406095] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  983.413252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  983.421232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  983.428709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  983.440488] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  983.452437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  983.458928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  983.465765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
11:02:27 executing program 0:
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
r4 = getpgrp(0x0)
capget(&(0x7f0000000000)={0x0, r4}, 0x0)
r5 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
dup2(0xffffffffffffffff, r5)
ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, <r7=>0x0})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfef0)
fsetxattr$system_posix_acl(r8, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b374e80f611201000be976c77795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306", @ANYBLOB='B', @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r9], 0x8, 0x1)
r10 = socket(0xa, 0x3, 0x8)
r11 = syz_open_dev$amidi(0x0, 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r12 = gettid()
r13 = getpid()
sched_setscheduler(r13, 0x5, 0x0)
waitid(0x83b895581628fca4, r13, &(0x7f0000000040), 0x80000000, &(0x7f0000000480))
sendmsg$key(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r12]], 0xfffffffffffffe56}}, 0x20004850)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27)
r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r14, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r14, 0x4000000000000002)
socket$pptp(0x18, 0x1, 0x2)
r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r15, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r15, 0x4000000000000002)
r16 = dup2(r15, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r16, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r17 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r17)
r18 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40)
writev(r18, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r18, 0x227d, &(0x7f0000000780))
r19 = getpgid(r4)
r20 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/fb0\x00', 0x409040, 0x0)
kcmp(r17, r19, 0x0, 0xffffffffffffffff, r20)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r21 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r22=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r23=>r17, r21, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r22}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r22}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r22}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r7, r8, 0x0, 0x1, &(0x7f0000000080)='\x00', r22}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r22}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={r23, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)='syz1\x00'}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r22}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r22}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r22}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r22}, 0xc)
open(0x0, 0xe279a88a3b20cda9, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x807}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r24 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$setpipe(r24, 0x407, 0xfffffffffffffffe)
bind$inet(r24, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r24, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r24, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r25 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
r26 = socket$inet_tcp(0x2, 0x1, 0x0)
r27 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e26, @broadcast}, 0x10)
sendto$inet(r27, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xffffffffffffffdc)
r28 = dup3(0xffffffffffffffff, r26, 0x0)
write$FUSE_IOCTL(r28, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/11)
r29 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
pwritev(r29, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r29)
sendfile(r24, r25, 0x0, 0x102000004)

11:02:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr\n\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:27 executing program 2:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000580)="537bd2f20bc9e3cd85c1d4e125114ebe5adaeb4e63f7d0b3037f5f6bd6f9f7c070174bded1602a2f130c521a33b1afa417516ec0ff15bee866b5ca584024e215b6023bfda77dafe907a6fb6ca53618b7b435d90d1ebb88e2e07ca7f7cd15c09e7d6038d64d2aee33a783c94b57276ce57d442c6b4c0347c0ffaa616ee3bb3c6a0792a2fa14cc5e35d984edcb3f9c650d5bdf9218887995e445aa486230d649ea9d4ee45d3745f1a50f87727ea9ff73d6bbaf4ebee760ec7feab5e1f15a652230da305c304d46cc556d28ae84c91fbd2dec64227e35e6f4cff1954546d7c81af8069d4e1015606791d2e762b1")
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r3, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r3, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={r3, 0x36, "49ca228c23e224ad6f4e81a3d9d815810320172cca454699e87013df00c145d451ee8f9540ad78241d6217d5cb6b337d41525f932394"}, &(0x7f0000000080)=0x3e)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)

11:02:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(&(0x7f0000000200)={0x6, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3, 0x6cea9f53, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=<r4=>0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8000, 0x2000)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x4, 0x2, 0x0, 0xb0, 0x0, 0x7ff, 0xa2910, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x5d}, 0x80, 0x6, 0x49c, 0x0, 0xffff, 0xc19, 0xd745}, r4, 0x6, r5, 0xc)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="ea"], 0x1)
mmap(&(0x7f0000004000/0x4000)=nil, 0x305102, 0x0, 0x32, 0xffffffffffffffff, 0x0)

11:02:27 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab1a250009008053ee0d7ac5d47e3c00000036", 0x1b)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000))

11:02:27 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90b, 0x41)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11)
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="3710129daeb1f0", 0x7}], 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@mcast1, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001580)=0xe8)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef7}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x8)
r4 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xffffbffffffffffd})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000340)={'ifb0\x00\x03\x00`\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
fstat(0xffffffffffffffff, &(0x7f00000000c0))
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000700000000000000000000000000b6a14e20b2fc523a26da5ab4b9e01cd09ab8ba7c427900051b3aa5a6f0007e772c2bc9b0ed0038a5131436e5ba2df3c4ce439262690415ac13d651c57bf2927e0ab59fc38ece5303d3b2f4da46e3f22965705bc0c2ee9f05dd937e4ac220616e6af0492c523705a3970ff7dcfa9a3e2a0198a0edb16853a2a03cfe79a7c3ee5be6df8673afd32da21b6bec991f704305", @ANYRES32=0x0, @ANYBLOB="04000d0000000000000000000400"], 0xc7, 0x8000}, 0x14008010)
lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600))
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff})
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0)
splice(r8, 0x0, r9, 0x0, 0x18, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001680), &(0x7f00000016c0)=0xc)

[  983.527042] binder: 29756:29757 ioctl c0306201 20000480 returned -14
[  983.593824] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:28 executing program 2:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000400000/0x4000)=nil, 0x4000)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, &(0x7f0000000140)=""/115, 0x73}, 0x42)

[  983.684013] device ifb0 entered promiscuous mode
[  983.699592] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr#\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  983.750336] protocol 88fb is buggy, dev hsr_slave_0
[  983.755527] protocol 88fb is buggy, dev hsr_slave_1
[  983.784464] device ifb0 left promiscuous mode
11:02:28 executing program 5:
socket$inet(0x2, 0x3, 0x7)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x40000)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SVE_GET_VL(0x33, 0x1bcee)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0)
unshare(0x40000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)

[  983.870355] protocol 88fb is buggy, dev hsr_slave_0
[  983.875490] protocol 88fb is buggy, dev hsr_slave_1
[  983.880697] protocol 88fb is buggy, dev hsr_slave_0
[  983.885775] protocol 88fb is buggy, dev hsr_slave_1
[  983.986279] IPVS: ftp: loaded support on port[0] = 21
11:02:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x33d, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000e00}]}]}, 0x24}}, 0x0)

11:02:28 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000040)={<r8=>0x0, 0x84f1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r8, 0xfffffffc}, 0x8)

[  984.099911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  984.120858] protocol 88fb is buggy, dev hsr_slave_0
[  984.126512] protocol 88fb is buggy, dev hsr_slave_1
[  984.200340] protocol 88fb is buggy, dev hsr_slave_0
[  984.202556] protocol 88fb is buggy, dev hsr_slave_0
11:02:28 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
recvfrom$packet(r6, &(0x7f0000000000)=""/30, 0x1e, 0x40000000, &(0x7f0000000040)={0x11, 0x12, 0x0, 0x1, 0x1}, 0x14)

[  984.482531] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  984.561674] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  984.656931] bridge0: port 3(gretap0) entered blocking state
[  984.663325] bridge0: port 3(gretap0) entered disabled state
[  984.675180] device gretap0 entered promiscuous mode
[  984.683841] bridge0: port 3(gretap0) entered blocking state
[  984.689656] bridge0: port 3(gretap0) entered forwarding state
11:02:29 executing program 3:
socket$inet(0x10, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x1)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300))
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
r2 = epoll_create1(0x0)
r3 = socket(0x10, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x20002007})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'ip6gre0\x00', {0x1}, 0x7})
socket$netlink(0x10, 0x3, 0x9)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r5)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000007643560000000062100000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0)

11:02:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr%\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8550b}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa000000}, 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x4002, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x4537, 0x0, <r6=>0x0, 0x0, &(0x7f0000000580)={0x7, 0x3}, 0x0, 0x0, &(0x7f00000005c0)={0x5, 0xb, 0x8, 0x7}, &(0x7f0000000600)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x5465}}, 0x10)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdbdc}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0x6d}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000140)='GPL\x00', 0xff, 0x0, &(0x7f0000000180), 0x41000, 0x0, [], r2, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x2, 0x8, 0x800}, 0x10, r6, r9}, 0x78)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[  984.851868] IPVS: ftp: loaded support on port[0] = 21
11:02:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
recvmmsg(r9, 0x0, 0xfffffffffffffd46, 0x40002061, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000778, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
syz_open_procfs(0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
getpid()
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2002, 0x0)
r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})
accept$netrom(r10, &(0x7f0000000280)={{0x3, @rose}, [@bcast, @remote, @rose, @null, @null, @rose, @netrom, @bcast]}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180), 0x1, 0x0, 0xffffffffffffffe9}, 0x100)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r11 = socket(0x10, 0x4, 0x0)
sendmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
getsockopt$nfc_llcp(r11, 0x118, 0x0, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000300)={0x3, 0x1, @stop_pts=0x7})
setsockopt$IP_VS_SO_SET_DEL(r11, 0x0, 0x484, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

11:02:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr+\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  985.026390] audit: type=1400 audit(1577271749.373:8959): avc:  denied  { block_suspend } for  pid=29830 comm="syz-executor.3" capability=36  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
[  985.053745] xt_AUDIT: Audit type out of range (valid range: 0..2)
11:02:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr,\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:29 executing program 3:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000200))
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket(0x840000000002, 0x3, 0x200000000000ff)
pipe(&(0x7f0000000040))
r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, 0x8)
ioctl$RTC_EPOCH_READ(r1, 0xc0287c02, &(0x7f0000000040))

11:02:29 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = socket$bt_bnep(0x1f, 0x3, 0x4)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r7, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r8=>r7, &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r8, 0x6}, &(0x7f00000000c0)=0x8)
r9 = socket(0x10, 0x2, 0xc)
write(r9, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  985.541228] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:31 executing program 5:
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000080), 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000008c0))
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xb, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000580)=ANY=[@ANYBLOB="0000fb009db0165605cd8a525512e1a4ff4949c51dffffffff162b2815efc9439244bcac6ecd82ca66de05ad442b2692cf239b29d0d216fada6ea8c3028b4e64d596a62c716c74d68d7c244db72171e8eba35a22e92c6e5ae12478aa122dca387c39c0cf5b8842952e904ee21d66becd58bbc4ea714d4ddce5cf2b571f8f8314f3a8cd82f75a4d27bcede0f42377a19635f972c17b8128eeaf22463debaba2f661d797450b6cfbec0726847251c225739b024d8ed63432b5ea03246c2d4719a82c890f28b87fdeeec7eb2a8f1a7c8b9e7f8f08ffba3c6d9a91d4362f6ed988cdbf00000000000000000000000000000000d90b999476cf62b94851f4ab4fc92d75ea7da7a7f3542adfcb76dcbd5d8327dc6f0987d4be95525acd92313ea72fcab94649140e55ad982743c0211f5e90e65705ae72ec76787907e16942b8470c8fa52163b2edeee6d5b26e2bc91a252c28b27abd3962b7aa02f87a7aa56f4af0e4b05d0f21d6719537ef7016caeb"])
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'})

11:02:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8550b}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa000000}, 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x4002, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x4537, 0x0, <r6=>0x0, 0x0, &(0x7f0000000580)={0x7, 0x3}, 0x0, 0x0, &(0x7f00000005c0)={0x5, 0xb, 0x8, 0x7}, &(0x7f0000000600)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x5465}}, 0x10)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdbdc}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0x6d}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000140)='GPL\x00', 0xff, 0x0, &(0x7f0000000180), 0x41000, 0x0, [], r2, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x2, 0x8, 0x800}, 0x10, r6, r9}, 0x78)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

11:02:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x20, 0x7}, 'port0\x00', 0x0, 0x4ebf758204e02812, 0x9, 0x401, 0x0, 0x401, 0x1000, 0x0, 0xc, 0x3f})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
close(0xffffffffffffffff)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ptrace$setopts(0x6300, r4, 0x5, 0x30)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x3)

11:02:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr-\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:31 executing program 2:
open(&(0x7f0000000100)='./file0\x00', 0x200c2, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0xf78e, 0x0, 'queue0\x00', 0x10000000})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r4}, 0x10)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000300)={'broute\x00'}, &(0x7f00000001c0)=0x78)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r9 = socket(0x10, 0x803, 0x0)
r10 = socket(0x2000000000000010, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='rS\xd5\xa5z')
sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000086b7e163f13cfb689b8fc2d8d3d19ee67f9505b524c58f9e80408c8fa086fefe130ad7947ec318a3e2e9da106f3de9987b8570e27cc6c0d67b76ebed22992afdc65aa294b353be89767cdc74f44651d62f1a2a6d4f5800c75108e9d68812f9f1b583f359d618021117a23e0313925bb8f14b", @ANYRES16=r11, @ANYBLOB="0312f1ff000900000000000000000e17d594ac2eb45caa460404b0b1cc833c3f1a0da31610c813062fd2608ce724dfb20ee481b719731e4ecf0e09370bab4afff00bba8e09ec53d8e581a095be91379b2b9478f6836b4990f85dec595fc099169b2c47ecc47503385c73f0433f49fb521b4081f69ac97ce89a1260c6ddf122b895fee76a1b09bb7d61f4615a"], 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000cdb0eb9f1c43ae2a507a4b8e8aa50dbcfacecb8bf48970dafa3afbaae1e7", @ANYRES16=r11, @ANYBLOB="020029bd7000fddbdf250f0000000800050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r11, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb85d}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x28520ad, 0x0)

11:02:31 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
ioctl$RTC_WIE_ON(r1, 0x700f)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000040))
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  987.599799] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  987.671032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46982 sclass=netlink_route_socket pig=29887 comm=syz-executor.2
[  987.711164] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  987.716435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45261 sclass=netlink_route_socket pig=29881 comm=syz-executor.2
[  987.758950] bond0: Enslaving bond_slave_1 as an active interface with an up link
11:02:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8550b}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xa000000}, 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x4002, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x4537, 0x0, <r6=>0x0, 0x0, &(0x7f0000000580)={0x7, 0x3}, 0x0, 0x0, &(0x7f00000005c0)={0x5, 0xb, 0x8, 0x7}, &(0x7f0000000600)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x5465}}, 0x10)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdbdc}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0x6d}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000140)='GPL\x00', 0xff, 0x0, &(0x7f0000000180), 0x41000, 0x0, [], r2, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x2, 0x8, 0x800}, 0x10, r6, r9}, 0x78)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

[  987.932899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46982 sclass=netlink_route_socket pig=29887 comm=syz-executor.2
11:02:32 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x2, 0x10001, 0x10000, 0x0, 0x0, 0x20400000, 0x3}, 0x1c)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb})

11:02:32 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"/752], 0xd8}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000000)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000080)="ffba666f58db0550cd551ddd89125a2d55477e1b1951aebab6bcd37a5313f86d8963f83d35dca3b29efb65df0141333a647d2afacdbd9ac76a0bfce3b640536784cb137a90d1952ff371", 0x4a}, {&(0x7f0000000800)="ee5d4f78a30e376d883d3ff0fed48bf83cb25ac027075e6125cbecd18c4f582786d1fd52a505ad15baa4942f42f397f7fb1bb039ecbea43cc7b5cdf18b87505f7245dd350ef8c52c9ecbafcc77367abc8d3a1d9adcd69fe4906263665c832d0af501303fac79139321", 0x69}, {&(0x7f0000000880)="e0e9103a56cf03ada89b5b7ccdb5baf8696235de77e62893fb6ccb906e55aa8205801dca9890c2d165d521840023a975e0a6dccc828c95d0c538db7fa041000ea7b22540", 0x44}, {&(0x7f0000000900)="fdc44e4c3aea3f25981a01ad868473bcfdbb4ab401f893f89ec17d45445d95d5586c72e7a49dabf573bb2555bfd7e7013b528edf57f5d3d4b6143d9f764b8cb83d9e0529b8dfdd7e1dbf0e6c03c0a013a7fac44a8c692823ae55c69f2e7b9d921c65e66b23fa4cd358ee13ca153a6c9910c1e352324369022c710f6e476246488288b563940330aff711", 0x8a}, {&(0x7f00000009c0)="3d18fa30030c2efddb6dc863bb3b766bb2495c8f74d7f3bde9b13e7167686bab838c743b9e2f731ca1e476a671ead5a1295a182a6ef3657873d4598237c16aeda9c1ad3501a4d4b513939c1c066d3382bd53dd21fd435f73aaa64f2f422f055010956349946681b6f4923025be70005a157939f8f1f4bc22", 0x78}, {&(0x7f0000000a40)="493c3d869e0f80f1bc24996843ffa14f05366f90cfc25ff40a432d572f53cef88aece9fddb9d19a0c729e5addb9579d471d99a465c62dc7368f1d155662a84e73c995e4a36b2c5edcbf5bc22ee3e2ae9f399160c955c0a9fcd0e6a1c2592b9f6", 0x60}, {&(0x7f0000000100)="50b189a9f2da9b80ffbdd1b503902c6967dd0da7f5fc08fe182ed6f507fe915011b07b9dabc6ac8382202fcb9bbaf4f51294cb", 0x33}], 0x7, &(0x7f0000000b40)=[{0x78, 0x100, 0x7ff, "c901c2ff9eab457bfb29a13d45f260a75ede4d9c43fc9199e88db602f5c9115c7326adbd2f1b09201c08049b75ceb8660859fb9af3a5e19b6be08527a357cca5c79a89eb19c36ffe3f5a72c765bceb928a2d2f401f344a111858f98da9eb7bf65c45b9e672"}], 0x78}}, {{&(0x7f0000000bc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)="2d9a577f1536f9ba99b9686b4d08b6eaf2f076", 0x13}, {&(0x7f0000000c80)="85fe50fd0a09b3956b60ea069c4a69aefe3feeb418b667c9e8f7ad38a1cd51f5a72b928eefbe9e58c13cc2b11a42f70c2e64c204f4469d900919085b17c26c14b98a57b8f71177ae465e015f4c82249d69c729bfb581283fc40fe3478be7550e01abac1b3b31c65d3d33da49cbd63c62feade85bc960f9d234de4c968a8e0a0529b7b9b60049021f025c1e27e60acf3fc8cf8190500f089b13f7ee0e7f952fd502ebb92712641174a3bba9367292b00c50cc0016f7c946f57e0289ffa622a3bd08344441631a", 0xc6}, {&(0x7f0000000d80)="242afdc20d8158af7dcbda2fd0686f1fff69cd709350ecf58fff6a777f8da551746f27dad87cfbb2ee56ab039c3a219f1b492f3f2b3428ca95d6a0269bed0a5c930bef33d682686dd42d932c105ac42acfa97f6c1d005e402f65ad2519107c4322f09e2c5defc1240874cfcc755daed9b3f9e64b8285f7ae7d6af87385165ff0fe234b886ff2bfe3b11444a1f4ec15c7e7252b44fa5eba163d380259fcde8b1b3877d519e04e8092e9e74579866778222affd006edc57a8ce7a18271d6f555ddd4ac5a01a7b39cbf203185e951fa8bc8f536baa7e6c7a1f4cc5faef9b7ed164309f3f60c98c406cb09e94b772315", 0xee}], 0x3, &(0x7f0000000ec0)=[{0x1010, 0x3a, 0xd4, "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"}, {0x28, 0x112, 0x2, "a7cd948ba17d2b192e98508a92d99b7c284b"}, {0x58, 0x113, 0x5, "f0717e7496e233596dd86ecfa75fa5d0b73d126a03103dade419c1024c4c22512d694d3245aac0b28142c9203f53be4a84de46646cb1644bf63efb85bd2a6d1a29aed9c84ade9b"}, {0x28, 0x0, 0x9, "bff1d9e9ed8ad83f1c97036c0d2302376180a6032e"}, {0x1010, 0x107, 0xffff, "d6f896704f90f692ce2fdee2f1b9e4b8e84742a820aaed8fb4a269d285d5232ae2c636f5dc302bd4131c968dd9300bbeb3bcf5a415189bd04d343b0c44c60fec246ac2f7c8908ee17e268942d2bcd7a0def0a370fb583b2e6a00098d1cf6ba878e11b3c3992ef3836721353b98ccfa92d70897f2629911806c781ad116a4e1c0b5a758a6d328f3d73a4b26a899970f54a22aea25373c7853c389478039458dcafe91545d6e9d52aac42e0fb7a8eda81d83d9ab792fa9b950c2e441fa4194eb77cadc04f4ba1a4ddf8adc02aacbf79a21be19f9b8d62d1ede854368afb29788a4982cdc2134ad5d1ede3a93cfe22207bfc95c1c560116bed5a3b4384e752776ea636fd4201926762a34f9d50e7196c2ae03ecf94a72718a42911b3203dc41e9e6d875d5f4cac483f3142de6c75e7d0b88468bd36bd62d0166cd06b94242504c9024ca4d42245e54cada7311ea845f16af565643bb69b5faf7bab43e9961162be4f22c1b00845861a3b8a619271e3161234459199dd0f1094b4f76af871f2d6f5c7405cd96436567d266a1d57c3a5900d180021fbba484a780b8040bf3f7662beeedbe2ea897171eee6fbf488913e0997fedd1ed3a8670617fe12b8b16fda7b4de79af7dacc8360db5b2ae646ec25cd7f48971a9997f5c9779f9b97553355ed0369ee7658f86ec09f13df6ae58f7a20906182e0e0f7ba286cced859939a0995f192acd6c5903e5307fd8ef005ba0a290c41da91995d39a693f4a734d9458f6750912709d5d9669af85c84f469f1d05efc2ae235470707df40b31764d63a9733cfd612f795d44154a98693a14dd457ab2cd3627f9b6013254a80287e165d1124eeda7ecc6924b6048c92798962f5345cf132b35d53caa72e7164522789efd425b44ea7b4ef5cefcc61d67e50389b82beb221869a9e3aedf35b506a2ad19424945253c42fae74b336526a74246deafce0709df902f2900d24688ef784d657fcd682891a19587687af3c9a0176623e3f8398ce610a1e046d9b7792dcc807b13a41d8d9ce1177dc17333d1c41f610eea44b27260880c9ccbfe40cd7a8477e89d856d07986d8c7dadcd4d4bfbfd3d422648b7e3f3d5469c02bc36f26319ea41ef8c195aa0219dd4af2179f41c4d1e198bf21833230b28738bb54735c930fff937a6a987ee8a45881ecd9cd246c4453085b133065a7e867b7402eaed4ca2898a04bb65153d0a4812dd785c89a1d89553fb93c152d9a0373804d5a3dae4599b72713c2ba889002aa0002e65fc442ce9d61b09cba2cfbde72523cf629324212846d905bb0fed66accd4202a91028178d317859f89c7b80fd649d452b20dbe6dca8f5dbb3fa35fa91b3816276fe2e08a06c97e1f1ad81aa3f657972c64340509f86505254ae91b4a6e546adac1e1b0348bad413769d8fbb9dbc0269f4ecd5d013597515329f318f31a3b4e9edb08dc30d8ac837055bd986a712ee0e4c2e7686133beadb27309271820fd31072e8a1c787ac9ec781a3cc4abb1d30469a72ad91a053775b29b61b889aaf6094a7852b7888f69b41acc2b6fd9ac02ba49a8a57e0fee6c9e5cb5dd3c6d78961a581c3dd4dfe292c957f82be569f1bad47b7a7fcef6ced4a709dd4c277fecea1b45b6b292bf9b97861fed9cbdd719a1df43a96739190934958072cd1491b2b3a6e68ccce38fe6dc18cd2f136e71caeff96aaab970a7d5e44c746a088411248c4e50e52b871162fedc4eedf2f0b373b256979bc21a7a69eaff225db29cfa00d623f8f2e2944d957b13c746c183a9854c47b63b3c1c81c8b031a39b3df8aa2e9ef688f9c2f1caec3277c1f123060b83276fb72dc29da288d58315f96fd6e0e0f8de2d8ec46ddaaf63323680e403451c8e98a89a0b521429a50bb541d85e4c77c9164175e910ea08a982ace893f272566ada0622109a360267c09494530427a478d78ef95879522242e80c8be331a62da469797e4dcc78feeb646ef1fa45c2b4e3d263bd4f51b08f8e062a4c0dfebea8a83e9ea259b2824315f22e9ed6410669068bac6805bb9c115447c5f61ab57c4902d255cb46e57c2022926a110fc7ffafa265c1f4c842c5d78f2051a2041c07a171e67c0f3ab54e4876c196c78df5aab376a8b65bde80b7dc2a77a95f59910f4c4dcc4d3b34f518ab35c6d4c62d2c407da576d8c8cca4efa95e4fcb7b433dcee402e1a886a820cc4a39edb77550cc1143994edfaa1e4c947c06f49dee1413cd487825425183ce563fb4888d2f9c2e719977695a9a5a3fddb17aec659e4d922a0c9e58551ed2ea56716a0cbca001870cbda509b51efe5172d295e816422ccd7556856d9a7661b9bd00d0056b15b30b62a36eab88038ac64732db537e9bc6a5f795b95d799e865956f80540918bf487a9a4b1f2a6e169d241fc0720ce59feafed0913402441e60599f8bfb0fda332782e12635aee839016d81ef98a8a95f679b9ba741de041c3cf01aa7e98fd9dc97408e1bcb7ad2ea1fa40d5de96bf3375551f4c82ca421d94f799ec71baea6673eb43c2f334490a1eb4ebf4c3f2f5e8249ef7207710219239648ad3e5d2b9d3ff64625b2253d6d40dc983bb2688dbaa76043fd3aa30da91b488b67f6b3942507b0e14a36c711824e5c163c1537bdf5ea335b3cde13da486a6dbf88df32e77a396e7c0b903275218009dd688f93bfddfa60d1a242d5c2777aca0ea5855abe186291dae7e34a2ec6ed43c59104316864f290817f13c07458355aefffc4e909556fa032db0abfac362af7062007aa229357e76de148ec814c77b9fe4a9cc9bb5215e265465e092497ccb3837ece0cc4ce0d4e8a5d27bdcc93c501905b373587c84ebc92ead8cd7db2f93744e9fb098e4fb9c882ca1104b59f6e1243d66d7fd2585748bbe15d83f2247d92108ee2447a0f52be03446a558ff9fff9ae51e873e03f5a0143ea9963914f9d50f3c19f43774bdf00705d4419e6311895c120a8cbd4059a010b7b67c509cb9226c64e0f70488abe18a5a626fa9bc5d2a0e7c99982831fc8ae3b36934b9f6613b868556ddce99cad165cbc3aabbae0a38cce81076b0a14eabc750b372fcf645c4311ce14cf399f599e656169376f4703d2a7c0da8d036227d9aa19f5a96a19fb323606ae8b43ee2e9140fbc190109965d05f1cc1d37422acc7b34731e33d70318fe628a91e2ede1eec38cd9c37b18bb36784907f24be20fec478c048df3e053f2a75be106f1f4332ad36ed7fb06666188fa7c43d04214e983463cde93b73cb3d923204487964724356194d165fc81184d7319c8af11fae37d5a02a7a193dc9fb6c7a9de9911d40a6f69dea2c7768ad8b8e6b9aab2f1d54e21f8e8b29beecd051bda21e0913be0c5aebf5d4a70be7e21a0bc48e69bd17afc97355d4d96b8b3db1205f3308c8e10668b72142a79665c3fd5c65a6b298792992f33b0fe27818fbbd3cc880e99425b1742ebaafae45d8eaade7ab0781a9f4414f3be89b297bbabea3190ebcf89882ed958215882dcff2d587bbbb163995057c5caa9dd02e36b191a34238efaf80b06f837d6af61cf45bb73b40346c836736906ff8d41b18cbfe9ece79f989c1e888b0b07f438b81bd3773602e2939a81ac58ee3648940ad2ce6915e1fb0ae6f5f9878350515abb96b88eb843bddcfce04cb7a54a89d77563bf794c5085600a94fc02dfcc232c7e747ac03ca8cc7b2d370596bfc38e175b8a92a62e5d07766a4397fd61c64eaa090de5d5be39594109edb6c165416cd52579a3064752b9aa7d3e4cd696ecdb8bf2969658a365f7148a7e9083c08aca2baa639e50314f01d05ea2ae3582902507f29c8aa31907e5c704bbe9ac0b280a92174b7106a117336ba77ca33b359f4e10f96c4408c5e8be2a73e7cb74a9cd1b8a9d4cd36068def1028f22231b292b966d77be816551e71c43f5ab9959b2cf888a125ec58b7fb4c0f493bbc068f2fd45a3d5387120270753ad316c54ab0895a993835ecd733a69635d8c5eb08f42024604bd1bdc64b61bd3b7182e3824440e94d468ff7dcba7a6b6387edfde2ea678c763aaf08c6aafb4a98d524676fbef174827ba7264ceb2e3f4ad722f3b48b19322661251f1042f18c94b56bc587170a8031d4db04aa9aed1699dc8a034daf6d6e63e3b21fabb53ca6c72499f292043e0ef732d8673260f7b1fd5ad9c429ae32a596ce320fe771917f8bc835077ec578b78e793e1598fbef339c65840acaf5aba854512d5b9a2a75d502a0788f79fd26afc9bb7b2102f1adbebfeb7020832002be14603f39913362f396c3c06c4cc4a5cec8495093e3d392e7f1add47f6b0ac9e6a737e6fed6059fa65390f22ffe56ca187083b90d46b61b7f32326c98b3e0329ee2c60828c15eee62ac6f6dca67659fbdf48e81834f698e9aacebf2325305c2abdf6a3beaae17faafd7e7ee238e52e23ba88e05ada69423f5d35abdad171f3e34000438de99ad1a5879f2f2e78298f0a273d38d0bb16e61a13b0315033ebd1d202beb3f64ef2fd6cbe567e1567da2580ae5ba1eaab370bd92a67173591f8fc671d6de79846bfdedbe63d0cb322f26e7141b4f785c71cc4109e62f01b5de9b2962581e589c707c9083433b41f0201f0b78fbabeb5dc00f560f7dd58445f8e7cade6ef224e0ac38501e0766d4785c8bcca478bb99253da5247ff980eda4c575c6f64ef111fac57352ee583d6c6e401d8a73081ceff769e879d561cb5b26e3584bac270648f99aa541fe2771af23e34fb1eb48b7933f2e4f4eff8a9f929f7df91e0695707698d86eda52da06a587cd80fe4b4c045693a2aa6309f812a3f4b3bd273c79fb1518af170a5dc9ea20075da079d76d36f00f12404350303eddfadca2bd51ed45915357132b9d12bde797477fa76b66bbe21b1e699a3a52d265c440e42fce4594c2e454afba5667cbd8e217100449ec7d05c670993c379685c480be48590d75406e889f6359d6be51f589cde91b5b36342203365e922a5fcd3e8fa08e8d6f5cadcb9713fcb61e3416c8174a36f6c11047595641a3e94e79e02afe268e316273abca8096ce25af472f886c693d2d54708c07aaf6b4a7ef54dc473663ebc5dec435778921debd7c75da5ad42309071467a3284aea476300e997913244e50dc64c87f124729042e4c34b0bde6323c7e74fe5045a6c6a55cb00ae8610929766a68233032d994250b79aea42a24b7ed597bf32095ccfcb963c903583d3e7903f5c9e765eb26d00a2f0bf9d08455f7b60b1df6fc8e0bce5add88804f03b9d092a86d5a1a691321818722141f5f316221fd75c4a42697978a48eb12478ef025545044e245c9f738bf1b52a886d4619afebcde0034c1ff7010495dad4543447ea094747769812320d2a77924023bb31f999732a7a587e07d08f5d8fa86fe8a610a7cca08acbc4532e624d1f441359240ea34cb1eb083c4dd8d80bdf49e4670892a08573c82878268737ea2a95cd68566f64c18ab092389877ee3b52fa1f53bcede775068b83d4823b666a66bd10edbe108a8681e6ad2eca96103c65b1efd053291916d960e0c9cebe59ad086c1dc62d1c0a6ec2712a6c151318b283f51125fa962afd9e082ba40110c9bead3f586623997b871432b58c01bc002d8f513d863f7e81f5225608a04e973788df2e8cbebb9c54778b2c35493b95221185c535a8b03d5e99d37263f28083d66d78d22cd5907c2db23a3e336edfb7db21f308834ae8d600d9127256a332229f1753c26b9cb3ee5670022a91b67bcd477d49f704639f60c7de08ed5fac2ec227f628678b87f8ab5a"}, {0xe8, 0x10d, 0x7, "e3c5d1a27d1b188d2074a89fa7ae975dd4d3b15123eed7b996cb5fd7b8b197b868246df6e4dfc06f5547a6354e9623511a126a8ab2aef8bc60e2c5786c89df4b91bb377cef73fd324c6744fdef46586bee1d590d817e89a2e00bd67d75adad8950a381b2f3fbcfa33afb4c4bd38f8e8ddeca342f01aa92a1c75216ec6411b3563e729c4c315fc80f0556281d43a0c3799a2fa0a90765d0da27b0740ba4633837653e1e552242d7ab8e59cf8b8c4dbcfbc867812686d51ecbddce32bd17bf67a3fba51365cfd9cb2999f0a16f82a79abffc4ee2"}, {0xf0, 0x3a, 0x3, "fb281c43fd09a6de752b12a9bbc4cf944068be3fea1b86bf3824294a56d825d351d91ba1568ddc3eafa8b8a544c4c74f4591814129de818d4afc1cd9406baaa33d886bb1091a9c5a6a354d52a8fe6c013043d7dc2356678f57093bc7d44e76c4ab25cbc102b97a327e4e83882536f4dabaa8245eeae0451f3c25e93a88b51cd5fb25a24f5625ecae07f152ca59315db560d74357b8f9f017b4867f367293c43a0ee288ac3186221777b11e259bd55152cf7870662b30add6b8e0aebd3421bf2e800674686b83cac21d3e31bbf07f3365516ba4542c6c3b60900449d5fa6ee2a3"}, {0x58, 0x31a, 0x9, "87d66ca7fb62c9ace157edfdde25f15d6faf36ecfc828d61473eaa36517ba2aac069da56a802b9a5fa56005747f2f75af1a5c52ef4e89b59e5580c968c3dd75bfc41c9"}], 0x22f8}}], 0x2, 0x20000001)

11:02:32 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r1)
r2 = socket(0x9, 0x800, 0xc)
write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='\xff\x00\x13\x00\x00 \x00', 0x0, 0x800)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400002, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r9})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000000)={0x3})
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

11:02:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsrB\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  988.770528] bond0: Error: Device is in use and cannot be enslaved
11:02:33 executing program 5:
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000080), 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000008c0))
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xb, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000580)=ANY=[@ANYBLOB="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"])
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'})

[  989.194884] device bond0 entered promiscuous mode
[  989.200056] device bond_slave_0 entered promiscuous mode
[  989.211178] device bond_slave_1 entered promiscuous mode
[  989.218422] 8021q: adding VLAN 0 to HW filter on device bond0
11:02:33 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r1)
r2 = socket(0x10, 0x2, 0xc)
write(r2, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/160, 0xa0)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000380)=0x7)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
splice(r8, 0x0, r1, 0x0, 0x4ffe0, 0x0)
r9 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x7f, 0x400)
sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffe}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)

[  989.396391] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  989.411946] bond0: Releasing backup interface bond_slave_1
[  989.935555] device bond0 left promiscuous mode
[  989.941710] device bond_slave_0 left promiscuous mode
[  989.947467] device bond_slave_1 left promiscuous mode
11:02:34 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = socket(0x10, 0x803, 0x0)
ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000180)=0x9)
openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r10, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x61}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', r8})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  990.393391] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  990.630114] IPVS: ftp: loaded support on port[0] = 21
[  990.922328] chnl_net:caif_netlink_parms(): no params data found
[  991.066434] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.073124] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.081140] device bridge_slave_0 entered promiscuous mode
[  991.088520] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.095672] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.103528] device bridge_slave_1 entered promiscuous mode
[  991.265649] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  991.276909] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  991.403878] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  991.414411] team0: Port device team_slave_0 added
[  991.421057] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  991.428331] team0: Port device team_slave_1 added
[  991.543119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  991.552178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  991.592359] device hsr_slave_0 entered promiscuous mode
[  991.650661] device hsr_slave_1 entered promiscuous mode
[  991.691586] device bridge_slave_1 left promiscuous mode
[  991.697718] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.751178] device bridge_slave_0 left promiscuous mode
[  991.757378] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.183191] device hsr_slave_1 left promiscuous mode
[  995.233680] device hsr_slave_0 left promiscuous mode
[  995.273689] team0 (unregistering): Port device team_slave_1 removed
[  995.286878] team0 (unregistering): Port device team_slave_0 removed
[  995.297518] bond0 (unregistering): Releasing backup interface bond_slave_1
[  995.355220] bond0 (unregistering): Releasing backup interface bond_slave_0
[  995.453324] bond0 (unregistering): Released all slaves
[  995.514399] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  995.524167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  995.538765] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  995.572611] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.582968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  995.593739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  995.600009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  995.607640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  995.617946] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  995.624373] 8021q: adding VLAN 0 to HW filter on device team0
[  995.634230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  995.642547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  995.650665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  995.658340] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.664755] bridge0: port 1(bridge_slave_0) entered forwarding state
[  995.673360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  995.683439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  995.694032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  995.701623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  995.709511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  995.717209] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.723592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  995.731911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  995.742823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  995.805643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  995.817779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  995.829373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  995.839314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  995.855748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  995.863858] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  995.872079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  995.880022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  995.892743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  995.901631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  995.909438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  995.920121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  995.927726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  995.936323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  995.949575] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  995.956024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  995.982288] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  995.996052] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  996.003299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  996.010054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  996.029421] 8021q: adding VLAN 0 to HW filter on device batadv0
11:02:40 executing program 3:
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
dup2(r1, r1)
getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f00000002c0), 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000fc008e8d000000020000deffffff00"/72], 0x48)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe)
socket$packet(0x11, 0x0, 0x300)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

11:02:40 executing program 5:
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000080), 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000008c0))
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xb, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000580)=ANY=[@ANYBLOB="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"])
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'})

11:02:40 executing program 0:
syz_mount_image$gfs2(&(0x7f0000000000)='\xe6OX\xc6}', &(0x7f0000000380)='./file0\x00', 0x7, 0x1f8, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/23])

11:02:40 executing program 2:
socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x4924924924925b1, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
close(r2)
socket$nl_route(0x10, 0x3, 0x0)

11:02:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsrG\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:40 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000180))
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r1)
r5 = socket(0x10, 0x2, 0xc)
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000b00)={@default, @bcast, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
write(r5, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
fstat(0xffffffffffffffff, &(0x7f0000000000))
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000a00)={0x0, <r9=>0x0})
r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r11 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r12 = dup2(r11, r10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$DRM_IOCTL_ADD_MAP(r12, 0xc0286415, &(0x7f0000000b80)={&(0x7f0000ffd000/0x3000)=nil, 0x66f, 0x3, 0x80, &(0x7f0000ffc000/0x4000)=nil, 0x1})
capget(&(0x7f0000000a80)={0x19980330, r9}, &(0x7f0000000ac0)={0x3f, 0x10001, 0x10001, 0x7ff, 0x80000001, 0x7})
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000009c0)={0x8})

[  996.478233] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  996.606724] bond0: Enslaving bond_slave_1 as an active interface with an up link
11:02:41 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$void(r2, 0xc0045878)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000001480)=""/16, 0x0, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080), 0x4)
r3 = socket(0x0, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000100), &(0x7f00000002c0)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x420000, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000300), 0x12)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000140)={0x1, 0x2d, "154d5b5503ed17d91d1fd1ba9865d7a49250d317df163b5806b72a568af51fb219041b98a8eadba2a5a6f65b69"})
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
io_setup(0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))

11:02:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsrl\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:41 executing program 0:
r0 = socket(0x15, 0x800, 0xff)
write(r0, &(0x7f0000000180)="2200000014002301040074000000000402080513010000000800020041100ee376ab", 0x22)

11:02:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr\xc0\x02L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:41 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x373}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000340)="d210733281fd61ffb93608a5006be06d9c54011154de8786d83e10ce47572ad28d2e6ca34995b809967625a268869af55af98457f5af12b84f5274cdfdc1e311d78dbb4d7103f5df65019cd1dc50e21fa8403d9652deaaa9487268c746477d6a51dcaa9a5027048224cdb17a4cc45e9d15470bbcc590f02afb0d5f49ee42416f9d0a74", 0x83}, {&(0x7f0000000400)="0a3e38c6b0b8a057ba76f24bf13ecaf5bb1dbf7646fbce9effdbc0625682cd1b8757a0fa3a8f6696f2324daf86608fd2afa60cefc015c06f8bb73521e335bb660a3a3e408429b7cec72c0f19a34c559c3f1bb30da04af242f4cc4b987bda779e1a784716d3acad9a26aea9bf4a95dafe093bd41d7d12b7d651d6e5b8e64f6dc8e7bd0cc8fb50bef2d313a17ac5867510b7f92d2299632a58ada5a76cf6695053c03c52e93628411f93dbb22fe371faccc8350854f4", 0xb5}, {&(0x7f0000000100)="1bc95fac66", 0x5}, {&(0x7f00000004c0)="8efd3156e05f781930f465523bc022e3ca5ea5660e78ed808a07fb370a0e18896a5d8f6c761a9ec298294d871e3a38f77de7bcdb4e335d260157223e0a7b11d71fdcb1ead588c5e2ae09b71c6e50597dca388a9ba5d948053eb413db1b7714073201e1dc6f46b5fbcb6b6b3785ef88bfe992af33", 0x74}, {&(0x7f0000000540)="e9e3bce108f458e743436333ae239fda3342e2c1eb14f91929867dd0725aba78285e5371dad00ed044cea6b75f0e4216e4e9383ed920561510d7c7eacb6d567d0ea02b309a8c3dff3222d8847d5ede309b5b5e1782180bfe3b35f1bbfff5945865f61909c3780894468183a2912cb309c59354b0516505477bcc1f013e0fc94732cd8895c7838402a4cf354d05430cea350a9bdf7c83dc86f9d557d6dcf778ddf99c0204d985bdbd84e28394ae0b0ee4cded275cfd495eeda00f439c9f3bbd72c9942657b92b68d0f000135de27eb7b9f81b5b51a695ff2a248f6e2e26b7d349a9f486977269df544f5c2f3a266d822a2b25e6f550", 0xf5}], 0x5, 0xee19)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r7, 0xc0bc5310, &(0x7f0000000200))
dup2(r4, r3)
sendfile(r2, r3, &(0x7f0000000000)=0xffffffff00000001, 0x3f)

11:02:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x02L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:41 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
write$uinput_user_dev(r4, &(0x7f0000000740)={'syz0\x00', {0x8001, 0x599, 0x3ff, 0xa9}, 0x42, [0x7, 0x4, 0x5, 0x76, 0x6, 0x1000, 0x4, 0x6fd9, 0x2, 0x5, 0x5, 0x6, 0x20, 0x9, 0x6, 0x7fff, 0xffffffff, 0x2, 0x4, 0x4, 0xab, 0xffffffff, 0xae8, 0x5, 0x758bcf91, 0x8, 0x2, 0x200, 0x0, 0x96a5, 0x0, 0x10001, 0x18ef5a6, 0x1741, 0xde, 0x401, 0x7e, 0x0, 0x5, 0x8, 0x2, 0x3358, 0x9, 0xfffffbff, 0x0, 0x3, 0xffb, 0x8, 0x4, 0x1000, 0x3, 0x7, 0x9790, 0x2d, 0x4, 0x4, 0x6, 0xffbfffff, 0x3ff, 0xf738, 0x101, 0x5f, 0x3, 0x8], [0x1, 0x1f, 0x6, 0x0, 0xfffffffe, 0x7fff, 0x7, 0x81, 0x7fffffff, 0x3, 0x2, 0x3, 0x9, 0x7ff, 0x4, 0x4, 0x1, 0x8, 0x1f, 0x9, 0x8e, 0x6, 0x93, 0x3f, 0x20, 0x7fffffff, 0x90000000, 0x4, 0x10001, 0x3f, 0x5, 0xa8, 0x4, 0x3, 0x18000, 0xa01, 0x3, 0x5, 0x52, 0xea, 0xffffff5d, 0x6, 0x7fffffff, 0x82, 0x4, 0x7, 0x5, 0x40, 0x80000001, 0x2, 0x3ff, 0x4, 0x10001, 0xf85, 0x8001, 0x1f, 0x5, 0x8000140, 0x8, 0x10001, 0x0, 0x100, 0xff, 0x18], [0x100, 0x1c4, 0x3, 0xf0, 0xff, 0x8, 0x4fef, 0x1f, 0x3, 0x7, 0x9225829, 0x80000001, 0x2, 0x8, 0x5, 0x369b, 0xffff, 0x400, 0xcf, 0x200, 0xc20c, 0x5, 0xfffffff7, 0x5, 0x0, 0x9, 0x101, 0x40000000, 0xc1, 0x87a1, 0x0, 0x9, 0x1, 0xffff, 0xfb, 0x6, 0x0, 0x3ff, 0x6, 0xfffffe01, 0x80, 0x80000000, 0x7, 0x8, 0x1, 0x400, 0xfffff972, 0x944, 0x8000008, 0xa, 0x2, 0x7d0, 0xd8, 0x10001, 0x4, 0x5919, 0x80, 0x1, 0x9, 0x0, 0x100, 0xff, 0x8, 0xffff], [0x6, 0x7fffffff, 0x1, 0x10001, 0x1000, 0x8, 0x40c, 0x1ff, 0xfffff0ca, 0x7f, 0x319f, 0x0, 0x9, 0x80000000, 0x8, 0x9, 0xffff, 0x1, 0x3, 0x81, 0xfff, 0xd56c, 0x9c4, 0x20, 0x100, 0x616a, 0x6, 0x20, 0x2, 0x3f, 0x20, 0x18c1, 0x3, 0x6, 0x9, 0x3, 0x100, 0x1003, 0x5, 0x1, 0x9, 0x0, 0x8, 0x8001, 0x20, 0xffffffff, 0xc4c, 0x3, 0x7, 0x800, 0x1, 0x8001, 0x1, 0xfdc, 0x10001, 0x1, 0x6, 0xfffffffd, 0xc, 0x4, 0x400, 0x5, 0xffffffff, 0x8]}, 0x45c)
writev(0xffffffffffffffff, &(0x7f0000000b40), 0x0)
sched_yield()
r5 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', 0x0)
r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz'}, 0x0, 0x0, r5)
add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000002c0), 0x0, r1)
r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r8 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r7)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000006c0)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf1\x0e\x00\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,\xba\xfd\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3\xfe_8', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_MOVE(0x1e, r8, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000006c0)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf1\x0e\x00\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,\xba\xfd\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3\xfe_8', &(0x7f0000000300)=@keyring={'\x00\x00\x00\x00\x00\x00\x00\x02\x00', r7})
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380))
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r9 = syz_open_procfs(0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r9, 0xc0106401, &(0x7f00000002c0)={0x1000, &(0x7f0000001040)=""/4096})

[  997.212504] bond0: Releasing backup interface bond_slave_1
[  997.286301] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:41 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x5, 0x8, "64b0b7", 0x31, 0x81})
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:41 executing program 2:
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0))
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
pipe(&(0x7f0000000000))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r3)
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r4, &(0x7f0000001400)="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", 0x53d)
sendfile(r4, r5, 0x0, 0x10000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}, 0xffffffff}, 0xffffff73)

11:02:41 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000b80)='cgroup.procs\x00\xd8\xee\xc5\x7f\x11Q\x1c2\x8b\x92\xeeH:zD\x8d\\\xfc\xe6q\xaa', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000380), 0x12)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000140)=<r9=>0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000140)=0x30f)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0x20}], 0x1, 0x0)
r12 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r13=>0x0}, &(0x7f0000cab000)=0xbb)
setresuid(0x0, r13, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030376666662c6d61785f726561643d3078303030303030303030303030623561622c736d61636b6673726f6f743d74727573746564656d31212a2c7d747275737465642c61756469742c736d61636b66736861743d6367726f75702e70726f637300d8eec57f11511c328b92ee483a7a448d5cfce671aa2c7065726d69745f646972656374696f2c7569643d", @ANYRESDEC=r13, @ANYBLOB='ldont_ieasure,\x00'])
rmdir(&(0x7f00000000c0)='./file0\x00')

[  997.526069] audit: type=1804 audit(1577271761.873:8960): pid=30037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir254921794/syzkaller.JeFDqO/167/file0/file0" dev="loop2" ino=203 res=1
11:02:41 executing program 0:
ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic})
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x185340, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x1, 0xff, 0x6, 0x8a2}, {0x2, 0x9, 0x40, 0x4}, {0x1f, 0x2, 0x3, 0x7}, {0x1, 0x4, 0x9, 0xab8}, {0x6198, 0x2, 0x7f, 0xeba2}, {0x0, 0x2c, 0x1, 0xea}, {0x2, 0x5a, 0x2, 0x7fff}, {0x3, 0x3, 0x5, 0x6}]}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r0, &(0x7f0000000300)="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", &(0x7f0000001300)=""/115}, 0x20)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/checkreqprot\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100040140}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xe1c60922d26b6902}, 0x4001)
r3 = accept4(0xffffffffffffffff, &(0x7f0000001540)=@sco, &(0x7f00000015c0)=0x80, 0x214bb40671716e56)
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000001600), &(0x7f0000001640)=0x8)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001680)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000016c0), &(0x7f0000001700)=0x4)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001740)='cpu.stat\x00', 0x0, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000001780))
stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800))
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001880)='/selinux/enforce\x00', 0x80, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80984120, &(0x7f00000018c0))
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001980)='/dev/sequencer\x00', 0x2, 0x0)
ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000019c0)={0x2f, 0x2e, 0x9, 0xf, 0x6, 0xae, 0x5, 0x0, 0xfffffffffffffffe})
lsetxattr$security_smack_transmute(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001a80)='TRUE', 0x4, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001b00)={0x7, &(0x7f0000001ac0)=[{0x1, 0x7f, 0x1f, 0x10001}, {0xb06a, 0x6, 0x1, 0x12}, {0x7ff, 0x5, 0x8}, {0xf9, 0x0, 0x2, 0x92b1}, {0x3, 0xbc, 0xf1, 0xfffffffc}, {0xfec9, 0x8, 0x40, 0x1000}, {0x2, 0x2, 0x15, 0xfff}]})
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r8 = add_key$keyring(&(0x7f0000001c40)='keyring\x00', &(0x7f0000001c80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000001b80)='ceph\x00', &(0x7f0000001bc0)={'syz', 0x2}, &(0x7f0000001c00)='/dev/dlm_plock\x00', r8)
openat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x8080, 0x6)
mq_open(&(0x7f0000001d00)='/selinux/checkreqprot\x00', 0x0, 0x2b, &(0x7f0000001d40)={0xea75, 0x10000, 0x1, 0x9})
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/nvme-fabrics\x00', 0x10001, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001dc0)=r4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001e40)={0x1, &(0x7f0000001e00)=[{0x9, 0x0, 0x7, 0xe6}]}, 0x10)

[  997.568805] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  997.595359] audit: type=1800 audit(1577271761.883:8961): pid=30037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=203 res=0
11:02:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@report={0x198, 0x20, 0x200, 0x70bd29, 0x25dfdbfc, {0xff, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@local, 0x4e21, 0x2, 0x4e20, 0x0, 0x2, 0x60, 0x20, 0x6, 0x0, r7}}, [@policy_type={0xc, 0x10, {0x1}}, @proto={0x8}, @extra_flags={0x8, 0x18, 0xfffffff8}, @proto={0x8, 0x19, 0xff}, @mark={0xc, 0x15, {0x35075a, 0xffffffe1}}, @policy_type={0xc, 0x10, {0x1}}, @algo_comp={0x110, 0x3, {{'lzjh\x00'}, 0x628, "9a3994f81382d374007966734f84609e99776c5ba11fd423a81cf0699acba1825aaf09e62114fb42ba6439b4dc59ac78d0d5198ca23b7b07e1c7f850bbd936f21a5e27fe14505cd130c563064442d08d73d6eee2866209bf3c797e4fc0e68ea791fb77601cc7ef6f3bc3b8940616730147a671ebaee2557fd8d974bf383e4d4f1991a84ea87d8f28af510b203362e08c2937bf5d9848602a1e392ad7deead6a33d02db54b37686f6a0bc3a7de82c08401857386f7067a8ba8611d11b55a30a5cf38e45a4b2"}}]}, 0x198}}, 0xefe1c61bb11cbfdb)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB="54c181a2ed89b3c5"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000140001001d000000000000000200e1d0", @ANYRES32=r8, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1f3bd95e5eeed061, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0)

[  997.681380] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:42 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
sysfs$2(0x2, 0x16, &(0x7f0000000300)=""/248)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x8)
statx(r0, &(0x7f0000000400)='./bus\x00', 0x4500, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000140)=0x30f)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20}], 0x1, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0x30f)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20}], 0x1, 0x0)
getgroups(0x7, &(0x7f0000000540)=[0x0, <r7=>r4, 0xee00, 0xee01, r6, 0x0, 0xee00])
write$P9_RGETATTR(r1, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x600, {0x11, 0x3, 0x7}, 0x4, r2, r7, 0x36, 0x7, 0xff, 0x6, 0x86be, 0x0, 0xffffffff, 0x0, 0xc5c, 0x3, 0xffff, 0x599ffddc, 0xffffffffffffffff, 0xe894, 0x1}}, 0xa0)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0xd, 0x1, 0x4, 0x80, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x21, &(0x7f00000006c0)=""/33, 0x41100, 0x9, [], 0x0, 0x17, r1, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0xef, 0x2}, 0x10, 0x0, r11}, 0x78)
sendfile(r8, r8, &(0x7f00000001c0), 0xa198)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0)
r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r14 = dup2(r13, r12)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xf703}, 0x0)

11:02:42 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000380)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0x4, [], &(0x7f0000000040)=0x3b})

[  998.092441] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  998.111961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  998.134360] audit: type=1804 audit(1577271762.493:8962): pid=30069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/11/bus/file0" dev="sda1" ino=17295 res=1
[  998.194268] audit: type=1804 audit(1577271762.553:8963): pid=30072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/11/bus/file0" dev="sda1" ino=17295 res=1
[  998.343529] overlayfs: filesystem on './file0' not supported as upperdir
[  998.389647] bond0: Releasing backup interface bond_slave_1
11:02:42 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = getpid()
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
syz_open_procfs(r3, &(0x7f0000000040)='personality\x00')
socket(0x10, 0x2, 0xc)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000340)={0x0, 0x38, "fc9634c4e9f5e104f67c47a476d6b73acc4b1aae3969b8815d575f57c7aef9df9242cb3d62a3bdc7384c10de4b4d8c4f1a12762909519f94"})
r10 = dup2(r6, r5)
io_setup(0x3, &(0x7f0000000300)=<r11=>0x0)
io_destroy(r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r12 = socket(0x10, 0x803, 0x0)
r13 = socket(0x2000000000000010, 0x3, 0x0)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)=' a\x062\x00')
sendmsg$IPVS_CMD_GET_DEST(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000086b7e163f13cfb689b8fc2d8d3d19ee67f9505b524c58f9e80408c8fa086fefe130ad7947ec318a3e2e9da106f3de9987b8570e27cc6c0d67b76ebed22992afdc65aa294b353be89767cdc74f44651d62f1a2a6d4f5800c75108e9d68812f9f1b583f359d618021117a23e0313925bb8f14b", @ANYBLOB="f909e6823211817a0328dab9fb8ec37bcba4594f998bbb7d2c0477adf0f7e4aa61591082b86150e03c18b1f73d5bc7938b471047d072d602ff505d221fba8e3179caed0dc9b11239bbc8c7ed90203aa043d64702f4cd6c986c67074f9651dd4d257c1cfc9770a49bb84c92e1dd447c175b3995546c5cd0f803715595abfe51fd5810b914f68bd4e903", @ANYBLOB="0305a10a50304cee259708000000f562e4c6844d608203c53ccc3bba4867768eb944f31398501fd2b3fb7adf0a2b979131e4af2cef1028cf8b3cc8bf1522fdbea737ecd3ededaadc1528cce45f38a87e7702df82f860c835862d7ab3dbbbcb8d0c58fb7211f23831dacbbdc9ceccc814d94a94a257794293b87eaecbc656acd8a0faa5e3e97ce81a604ec941584316285a9c1b24ebacfd33c9cb1c92223a56a74a4bea2d7e1b529d5d23bce9d9776324570c9366df3f1abbb0307085abc4"], 0x3}}, 0x4801)
sendmsg$IPVS_CMD_GET_INFO(r12, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000cdb0eb9f1c43ae2a507a4b8e8aa50dbcfacecb8bf48970dafa3afbaae1e7", @ANYRES16=r14, @ANYBLOB="020029bd70c27f4118dc15278b0015dbdf25605d0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2208}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r14, 0x111, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x60000000)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'erspan0\x00', {0xf9}, 0x5})

11:02:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x2bfa6a426fbe19e1, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pkey_alloc(0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x1400000000000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000500)=0x101)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0x7, 0x81}, 'port1\x00', 0x10, 0x8, 0x5e, 0x0, 0x800, 0x7, 0x8, 0x0, 0x4, 0x6})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
setitimer(0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0))
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
fchdir(r2)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580))
r4 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r4, 0x0, 0x0)
socket(0x2, 0x1000000000000002, 0x0)

[  998.447824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30054 comm=syz-executor.2
[  998.624448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45261 sclass=netlink_route_socket pig=30079 comm=syz-executor.4
[  998.841531] bond0: Enslaving bond_slave_1 as an active interface with an up link
11:02:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x03L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:43 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9880, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, 0x0)
read(r0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20001, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x8000000000000000, 0x0)
connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @hyper}, 0x10)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x4)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x32)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
connect$rxrpc(r8, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @local, 0x200}}, 0x24)

[  998.925023] audit: type=1804 audit(1577271763.283:8964): pid=30069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/11/bus/bus/file0" dev="sda1" ino=16578 res=1
11:02:43 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000100)=<r1=>0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0)
ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6)
close(r0)
socket$caif_seqpacket(0x25, 0x5, 0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

11:02:43 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x12)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
write$FUSE_OPEN(r3, &(0x7f0000000280)={0x20, 0x0, 0x6, {0x0, 0x1}}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x2007fff)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x105000, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x0, &(0x7f0000000140)="4d835b1cb2464dbc3837e19128276bd4f6a054ef7ea830c96c15637038d6de", 0x1f)
r6 = socket(0x2, 0x803, 0xff)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r7 = dup(r6)
r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3})
sendfile(r7, r8, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

11:02:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x04L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  999.275618] audit: type=1804 audit(1577271763.633:8965): pid=30116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir272709807/syzkaller.kdgGe9/154/bus" dev="sda1" ino=16674 res=1
11:02:43 executing program 0:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 04096'], 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)='X', 0x1, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

11:02:43 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs], 0x0, 0x20000000, 0x0})
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r8 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0)
write(r8, &(0x7f0000000140), 0x27e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='!\xe4&*-\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$DRM_IOCTL_SET_VERSION(r11, 0xc0106407, &(0x7f0000000000)={0x3f, 0x9, 0x81, 0x7f})

[  999.388301] audit: type=1804 audit(1577271763.703:8966): pid=30119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir272709807/syzkaller.kdgGe9/154/bus" dev="sda1" ino=16674 res=1
[  999.445616] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  999.459971] encrypted_key: keyword 'new' not allowed when called from .update method
11:02:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x05L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:43 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88))
msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0)

11:02:44 executing program 0:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

11:02:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x06L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[  999.737321] audit: type=1804 audit(1577271764.093:8967): pid=30147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/15/bus" dev="sda1" ino=16769 res=1
11:02:44 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x9)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet6(0xa, 0x0, 0x0)
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r1)

11:02:44 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x5d}, [@call={0x4e}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64)

[  999.858221] audit: type=1804 audit(1577271764.143:8968): pid=30147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/15/bus" dev="sda1" ino=16769 res=1
11:02:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\aL\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0x7, &(0x7f0000000280), 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[ 1000.066738] audit: type=1804 audit(1577271764.423:8969): pid=30116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir272709807/syzkaller.kdgGe9/154/bus" dev="sda1" ino=16674 res=1
11:02:44 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0)
ftruncate(r1, 0x40000)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x67)
sendfile(r0, r1, 0x0, 0xffe4)

11:02:44 executing program 2:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = shmget(0x0, 0x4000, 0xa8000303, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001)
r2 = shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
shmdt(r2)
shmdt(r2)
shmdt(r2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

11:02:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\bL\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
capget(&(0x7f00000000c0)={0x20080522}, 0x0)

11:02:44 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r1 = socket(0x10, 0x2, 0xc)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
vmsplice(r3, &(0x7f0000000380), 0x6c5ed7bea21b84ae, 0x1)
r4 = creat(&(0x7f0000001380)='./file0\x00', 0xa0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000000200)=0x4, 0x4)
ioctl$SIOCRSACCEPT(r4, 0x89e3)
write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)
set_robust_list(&(0x7f00000000c0)={&(0x7f0000000000), 0x8, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18)

11:02:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100c008, 0x0)

11:02:44 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r1)

[ 1000.415562] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:44 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x2, 0x0)
close(r0)

[ 1000.457043] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:44 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000000)={0xad, ""/173})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r5)
r6 = socket(0x10, 0x2, 0xc)
write(r6, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r5, 0x0, 0x4ffe0, 0x0)

11:02:45 executing program 0:
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0293f4a", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e00000048000100440004ea200001000a00000000000000ff01000000000000000000000000000100000000203adf524200000000000000fe8000"/86], 0x5c}}, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003000000"], 0x3}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[ 1000.649710] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:45 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[ 1000.754789] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:45 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_GET_SECCOMP(0x15)

11:02:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040))

11:02:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0`L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:45 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
memfd_create(0x0, 0x0)
open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
utimes(0x0, 0x0)

11:02:45 executing program 3:

11:02:45 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_ifreq(r0, 0x8910, 0x0)

11:02:45 executing program 3:

11:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
semctl$SETVAL(0x0, 0x0, 0x10, 0x0)

11:02:45 executing program 2:
mkdir(&(0x7f0000001240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0)

11:02:45 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001})
r1 = socket(0xa, 0x2400000001, 0x0)
r2 = dup2(r0, r1)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140))

11:02:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_delete(0x0)

11:02:45 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000))
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r5)
r6 = socket(0x10, 0x2, 0xc)
write(r6, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)

11:02:45 executing program 5:
r0 = socket$inet(0x2, 0x4040000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000002c0)=0x40000000000ffb, 0x4)
bind$inet(r0, &(0x7f0000001280)={0x2, 0x8000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x4fdc8a68a3ce6a8e, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
sendto(r0, &(0x7f00000012c0), 0xfffffe48, 0x0, 0x0, 0xfffffffffffffe62)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xffc}], 0x1}, 0x0)

11:02:45 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0004009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0)

11:02:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\xfdL\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1001.593979] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1001.719510] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\xfeL\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:46 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e000400900000000000000000200010000000000e1ffff0100000000030005000000000002000000e00000810000000000000000"], 0x50}}, 0x0)

11:02:46 executing program 3:
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000003c0)=""/141, 0x8d)

11:02:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$sock_int(r3, 0x1, 0x32, &(0x7f0000000100), 0x4)

11:02:46 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
r2 = semget$private(0x0, 0x2000000010a, 0x0)
semctl$IPC_STAT(r2, 0x0, 0x2, 0x0)

11:02:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x80000001})

11:02:46 executing program 2:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
listen(r0, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0)

11:02:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00l\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:46 executing program 3:
clock_settime(0xa8c430c28107a14f, &(0x7f0000000000)={0x77359400})

11:02:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x800000004e22}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
write(r4, &(0x7f0000000380), 0xfffffffe)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

11:02:46 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvfrom$rxrpc(r0, &(0x7f0000000000)=""/212, 0xd4, 0x20, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x7f, @loopback, 0x4}}, 0x24)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x8000, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000640))
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x2}, {0x4}]}]}, 0x2c}}, 0x0)

[ 1002.508282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1002.529659] Unknown ioctl -2146929151
11:02:46 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000180)=""/130, 0x9a2733f6c2698b56, 0x0, 0x0)

[ 1002.552466] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1002.560993] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1002.577129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1002.589261] net_ratelimit: 2 callbacks suppressed
[ 1002.589276] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
11:02:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290)

[ 1002.612208] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000922f0c001a000a17c07e695b95ae"], 0x2c}}, 0x0)

[ 1002.715600] xt_connbytes: cannot load conntrack support for proto=7
[ 1002.728390] xt_connbytes: Forcing CT accounting to be enabled
11:02:47 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)

11:02:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x06\xc0\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0x0, 0x0, "b62ba8b4fa4433467bf23bef25bacbfa76d415"})

[ 1003.079028] xt_connbytes: cannot load conntrack support for proto=7
11:02:47 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2cf7a6a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
munmap(&(0x7f00000c5000/0x3000)=nil, 0x3000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36)

11:02:47 executing program 5:
getdents(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10)

11:02:47 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @descriptor="1aadd17c1b0d7c65"}})
close(r2)
r5 = socket(0x10, 0x2, 0xc)
write(r5, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4040, 0x0)

[ 1003.426087] device gretap0 left promiscuous mode
[ 1003.426341] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1003.444276] bridge0: port 3(gretap0) entered disabled state
[ 1003.497706] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:47 executing program 0:

11:02:47 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

11:02:47 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet6(0xa, 0x3, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc)

11:02:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x0e\xc0\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:47 executing program 3:

11:02:48 executing program 3:

11:02:48 executing program 3:

11:02:48 executing program 2:

11:02:48 executing program 0:

11:02:48 executing program 3:

11:02:48 executing program 2:

11:02:48 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000000)=0x1, 0x4)
r4 = gettid()
tkill(r4, 0xd)

11:02:48 executing program 0:

11:02:48 executing program 3:

11:02:48 executing program 2:

11:02:48 executing program 5:

11:02:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00l\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:48 executing program 2:

11:02:48 executing program 0:

11:02:48 executing program 3:

[ 1004.346549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1004.386442] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:48 executing program 5:

[ 1004.387533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:02:48 executing program 2:

11:02:48 executing program 0:

[ 1004.456498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1004.493321] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:49 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:49 executing program 5:

11:02:49 executing program 3:

11:02:49 executing program 2:

11:02:49 executing program 0:

[ 1004.755877] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1004.837355] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00\xc0\x06H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:49 executing program 5:

11:02:49 executing program 3:

11:02:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1)
r4 = socket(0x2, 0x3, 0x100000001)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto(r4, &(0x7f0000000380)="0ea9d25ac942be4c", 0x8, 0x0, 0x0, 0x0)

11:02:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
capget(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100))

[ 1004.986498] x_tables: duplicate underflow at hook 3
11:02:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x17)
fallocate(r3, 0x100000003, 0x0, 0x28120001)
fallocate(r2, 0x100000003, 0x0, 0x28120001)

11:02:49 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x80000000000004)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfffffffffffffffe, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, &(0x7f0000000140)=0x20)

[ 1005.065697] x_tables: duplicate underflow at hook 3
[ 1005.076637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1005.111064] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1005.124501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1005.412152] device bridge_slave_1 left promiscuous mode
[ 1005.417709] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.451505] device bridge_slave_0 left promiscuous mode
[ 1005.457090] bridge0: port 1(bridge_slave_0) entered disabled state
11:02:49 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/sn\x12\a\x008\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_G_OUTPUT(r9, 0x8004562e, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68+0\x99\x14k^nBx\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r10 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0)
ftruncate(r10, 0x200004)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
sendfile(r0, r10, 0x0, 0x80001d00c0d0)

11:02:49 executing program 0:
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)

11:02:49 executing program 5:
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x200, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xbb)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000280)={0xa9b7, 0x1, 0x2, 0x3ff, [], [], [], 0x7f, 0x800, 0xfffffffc, 0x6, "db88927a91cac6da19accaf80bcb4979"})
setresuid(0x0, r2, 0x0)
syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, &(0x7f0000000200)={[], [{@obj_role={'obj_role', 0x3d, 'swidth'}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r0}}, {@euid_gt={'euid>', r2}}, {@permit_directio='permit_directio'}]})

11:02:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00\xc0\x0eH\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20002, 0x0)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6*\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:')

11:02:49 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, 0xffffffffffffffff)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000200)={0x100, 0x2, @value=0x7})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="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"], @ANYRESDEC=r4], 0x1c)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1005.626183] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:50 executing program 0:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x64, 0x0, 0x0, 0x3, 0x0, 0x0, 0xacc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000000c0)=0x4, 0x4)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
r6 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
r7 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
connect$nfc_llcp(r6, &(0x7f0000000440)={0x27, 0x0, 0x0, 0x3e390a89127ee97f, 0x2a, 0x4, "687c290e042f225b777babcd46d3c2758de8ab18d47581641834da0d92aa91f71331852f2b87ef6c696775c527d24fd317e0229cc8ed2ef4c71ae9637897a1", 0x2}, 0x60)
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1031a008}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r11, 0x30, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40000)
ftruncate(r7, 0x208200)
sendfile(r0, r6, 0x0, 0x8000fffffffe)

11:02:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x20, &(0x7f0000000440)=<r0=>0x0)
io_destroy(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/62, 0xffffffffffffffeb, 0x400, &(0x7f0000000040)={r2, r3+10000000})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0)
getpid()

[ 1005.672445] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:50 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1005.847065] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1005.902945] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:02:50 executing program 0:
r0 = getpid()
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000540))
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000e40)=""/216, 0xd6}], 0x100000000000002e, &(0x7f00000006c0)=""/91, 0x5b}, 0x10001}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/108, 0x6c}, {&(0x7f0000000840)=""/100, 0x64}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)=""/142, 0x8e}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000b00)=""/193, 0xc1}], 0x4, &(0x7f0000000c00)=""/85, 0x55}, 0xae60}], 0x3, 0x2003, &(0x7f0000000d40))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ustat(0x4dd5, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="66ba4100ec0f20e035002000000f22e00f7ef2f2e0000fc77a9d8fe96091ad5200000064f30fc7b70f00000066b83c010f00d0ea7b5549161c00f0312407", 0xffffffaa}], 0xabb4cbfa6006e1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000e00)=[@text16={0x10, &(0x7f0000000d80)="3e0f78393ef36fbaf80c66b8584d998266efbafc0c66ed260f00d266b9800000c00f326635000800000f30660fc2f9006767a72e660ff377010f79760a66b9170101c00f32", 0x45}], 0x1, 0x20, &(0x7f0000000e40), 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce], 0x10000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:02:50 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]})
r1 = epoll_create1(0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0)
symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380))

11:02:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg\xa3\x00', 0x0, 0x800)
ioctl$BLKTRACESETUP(r0, 0x2284, &(0x7f0000000100))

[ 1009.392617] device hsr_slave_1 left promiscuous mode
[ 1009.445430] device hsr_slave_0 left promiscuous mode
[ 1009.505121] team0 (unregistering): Port device team_slave_1 removed
[ 1009.516054] team0 (unregistering): Port device team_slave_0 removed
[ 1009.526591] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1009.575721] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1009.659201] bond0 (unregistering): Released all slaves
[ 1009.726649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1009.737142] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1009.743336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1009.772340] device nr0
 entered promiscuous mode
11:02:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x2000000000000021, 0x0, 0x10000000000002)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0)
r2 = dup2(r0, r1)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300), 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x22805}, 0x800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001940), 0x0, 0x4008000)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x40)

11:02:54 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/')
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x4)
syz_open_dev$ndb(0x0, 0x0, 0x400)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = dup(r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x200, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x9, 0x902, 0xffffff56}, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xffff}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r4}, 0xc)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r4}, 0x173)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000000c0)=r5)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)

11:02:54 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:54 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
read$usbfs(r2, &(0x7f0000000040)=""/110, 0x6e)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg$inet(r3, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_u8={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x8, 0x4, [@multicast2]}]}}}], 0x30}}], 0x24, 0x0)

11:02:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00\n\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:54 executing program 3:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x500004}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="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"], 0x250}}, 0x20)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x188, r3, 0x102, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaac0}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c00000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000080)=""/138, 0x8a)
msgrcv(r0, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x0, 0x0)

[ 1010.229725] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1010.238911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1010.265198] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1010.272409] block nbd5: Receive control failed (result -107)
[ 1010.287364] block nbd5: Attempted send on invalid socket
[ 1010.293277] block nbd5: shutting down sockets
[ 1010.298257] print_req_error: 14 callbacks suppressed
[ 1010.298268] print_req_error: I/O error, dev nbd5, sector 0
[ 1010.309373] buffer_io_error: 2 callbacks suppressed
[ 1010.309383] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1010.321851] print_req_error: I/O error, dev nbd5, sector 2
[ 1010.327558] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1010.335893] print_req_error: I/O error, dev nbd5, sector 4
[ 1010.341674] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1010.345369] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1010.351186] print_req_error: I/O error, dev nbd5, sector 6
[ 1010.361849] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1010.371331] print_req_error: I/O error, dev nbd5, sector 0
[ 1010.377021] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1010.384719] print_req_error: I/O error, dev nbd5, sector 2
[ 1010.390475] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1010.390718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1010.397534] print_req_error: I/O error, dev nbd5, sector 4
[ 1010.397551] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1010.397569] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1010.424241] print_req_error: I/O error, dev nbd5, sector 0
[ 1010.429953] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1010.437668] print_req_error: I/O error, dev nbd5, sector 2
[ 1010.443450] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1010.450985] print_req_error: I/O error, dev nbd5, sector 4
[ 1010.459215] ldm_validate_partition_table(): Disk read failed.
[ 1010.521578] Dev nbd5: unable to read RDB block 0
[ 1010.552800]  nbd5: unable to read partition table
[ 1010.580731] ldm_validate_partition_table(): Disk read failed.
[ 1010.607679] Dev nbd5: unable to read RDB block 0
11:02:55 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x4a2000)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904054865160b00170002000000000004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0)

[ 1010.632328]  nbd5: unable to read partition table
11:02:55 executing program 2:
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000700)=""/4096)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="b6", 0xfffffe7e)
r8 = syz_open_procfs(0x0, 0x0)
preadv(r8, 0x0, 0x3b2, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x2, r9, 0x1, 0x1, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r11 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r10, @ANYBLOB="0008000000000000bab10c2c04366943a13e52f98e8b4fd41a48d0148bd60dafd66909cef70139"], 0x20}}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4)
pivot_root(0x0, &(0x7f0000000340)='./file0\x00')
write$P9_RLINK(r11, &(0x7f00000004c0)={0x7, 0x47, 0x1}, 0x7)

11:02:55 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000190100000000000000050000000004000100"], 0x18}}, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x5}, 0x8)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0xe9ff53660c9d7455, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0xa, 0x0, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x210801, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r7, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001400)={r7, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0x5}, &(0x7f0000000140)=0x90)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
gettid()

[ 1011.160346] protocol 88fb is buggy, dev hsr_slave_0
[ 1011.166981] protocol 88fb is buggy, dev hsr_slave_1
11:02:55 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0)
fsetxattr$security_evm(r0, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000340)=@v2={0x3, 0x40, 0xe, 0xfffffffc, 0x37, "c989bd9f39c7188ad1d067d7004e98ed9298690955d0b0874239128b33d4f6aaadc0e52b4d14cfbf4f6f8aa5974ff1ea773e523d47f97e"}, 0x41, 0x1)
recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0}}], 0x11, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r7, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast2, 0x0, 0x0, 'sh\x00'}, 0x2c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r9)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r10, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c)
splice(r8, 0x0, r9, 0x0, 0x100000002, 0x0)
r11 = open(&(0x7f00000000c0)='./file0\x00', 0x68042, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000f8", @ANYRESHEX=r11])
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r11, 0xc1004110, &(0x7f00000001c0)={0x7, [], [{0x3, 0x7fffffff, 0x6}, {0x7fffffff, 0x4, 0x1}, {0x0, 0x8001, 0x3}, {0xc000, 0xfffffff8, 0x800}, {0x9, 0x8}, {0x45, 0x4, 0x1cd}, {0x2, 0x0, 0x8}, {0x0, 0x9, 0x5}, {0x3, 0x7, 0x7}, {0x1, 0x4, 0x8}, {0x7ff, 0x6, 0x7}, {0x401, 0x1, 0x4}], 0xc65})

11:02:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3f1f, &(0x7f0000000000)=[{}]})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x4)

11:02:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00%\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1011.240378] protocol 88fb is buggy, dev hsr_slave_0
[ 1011.245533] protocol 88fb is buggy, dev hsr_slave_1
11:02:55 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r0)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x17)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={0x0, @bcast, @bpq0='bpq0\x00', 0x1f, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x81, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x14003, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x2e91, &(0x7f0000000180)=0xff})
sendfile(r4, r8, &(0x7f0000000080)=0x3ff, 0x7)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

[ 1011.499191] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1011.510999] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:02:56 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8400, 0xc3)
ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000040)=[0x0, 0x958c])
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x800)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000280)=[0x0, 0x33d1])
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x410000)
dup2(r9, r5)
pwrite64(r5, &(0x7f0000000180)="28bdc39966c3ffd052a47ac85c04269fb6e12e10e7897a0b131ec3413d05f9839978be01a178bbfe9141c083b6f009965f34d09a72dfd945cf47bafc5950172f8a35fece4339f120bebade7d0294578abbae25bc63aae0efe68361bb662da29dd90d6f468588dcffcdcb3fe984aecbee7ea39ee70b6da003461b2100465bab6f8467abf3aebc7d577bb4afd3ffd7ed5d3c73142457da7cb84b85617ce3d02ca8c9cc8feda621b69e7d687d41913f980522b51e3d388520c851aedc6eedb6785ef9bee3fd65c3e40073a94e", 0xcb, 0xffff)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:56 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0xb4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
recvmsg(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@nl=@proc, 0x80, 0x0}, 0x12022)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x9c)

[ 1011.734346] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1011.800412] protocol 88fb is buggy, dev hsr_slave_0
11:02:56 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x408000, 0x0)
ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x7})
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0)

[ 1011.823690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1011.844781] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1011.903850] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1011.910000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:02:56 executing program 5:
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x9, 0x80000001})
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000100)={0x4, 0x7, 0x2, 0xfff, 0x9, "d764a80d0aeb049f"})
r5 = socket(0x200000000000011, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
fchdir(r8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'})
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x8001, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000180)={<r10=>0x0, 0x1b, "3f5a0eb019480120fbd0a090d8dba176de47f08ef58582d01f51e3"}, &(0x7f00000001c0)=0x23)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000300)={r10, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x905f, 0x200, 0x7, 0x7, 0x5}, &(0x7f00000003c0)=0x98)
write$cgroup_type(r1, &(0x7f0000000200)='\x00\x02readed\x80', 0xffffffad)
getresuid(&(0x7f0000004180), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x5c, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e21, 0x4, 'lblcr\x00', 0x20, 0x7, 0x10}, 0x2c)

11:02:56 executing program 2:
socket$kcm(0x10, 0x2, 0x10)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffea0}, 0x0)

[ 1012.120373] protocol 88fb is buggy, dev hsr_slave_1
11:02:56 executing program 2:
creat(&(0x7f0000000100)='./file1\x00', 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
openat$cgroup(r1, 0x0, 0x200002, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x400)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180), 0xa)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d)
symlink(&(0x7f0000000480)='./file1\x00', &(0x7f00000003c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0x0, 0x0})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x4, 0xffffffa5, 0xfa00, {{0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x48)
epoll_create1(0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')

11:02:56 executing program 5:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x7, 0xc8, &(0x7f0000000080)=0xeb42})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000100)=""/52, &(0x7f0000000140)=0x34)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
fcntl$getownex(r4, 0x10, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6(0xa, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01\xd8\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'bridge0\x00\xff\xff\xfd\xfd\x00\x00\x00z', 0xfff7ffffffffffdb})

11:02:56 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:02:57 executing program 0:
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x80580)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x68042, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b)
fallocate(r2, 0x0, 0xffff, 0x9)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1})
mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
read(r1, &(0x7f0000009f9c)=""/100, 0x64)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f000090b000/0x2000)=nil, &(0x7f0000000140))
tkill(0x0, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)

[ 1012.671125] bridge0: port 3(gretap0) entered disabled state
[ 1012.677118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.683771] bridge0: port 1(bridge_slave_0) entered disabled state
11:02:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x02H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3df294c78b27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc673fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/141], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 1013.301904] bridge0: port 3(gretap0) entered blocking state
[ 1013.307731] bridge0: port 3(gretap0) entered forwarding state
[ 1013.313874] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.320307] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1013.326981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.333419] bridge0: port 1(bridge_slave_0) entered forwarding state
11:02:57 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x7, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x49686f2794b83a84, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r5=>0x0, @broadcast, @multicast1}, &(0x7f0000000140)=0xc)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_GET_REGS(r8, 0x8090ae81, &(0x7f00000002c0))
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@remote, 0x74, r5})
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup(0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = dup3(r1, r9, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0), 0x0, 0x0)
request_key(&(0x7f0000000180)='blacklist\x00', 0x0, &(0x7f0000000200)='/dev/kvm\x00', 0xfffffffffffffffb)
setsockopt$bt_BT_RCVMTU(r11, 0x112, 0xd, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f00000003c0)=""/244, 0xf4)
dup2(r11, r10)

[ 1013.365229] device bridge0 entered promiscuous mode
11:02:57 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004a000704ab092500090007000aab80df01000000000036445c5c0630cd581d06", 0x24)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1013.430940] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1013.467762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
11:02:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={<r8=>0x0, 0xffffc64e}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}, 0x2}}, [0x10000, 0x4, 0xfffffffffffffffb, 0x800, 0x3, 0x2, 0x7fff, 0xd98, 0x21c, 0x1, 0x0, 0x3, 0xff80000000000000, 0x0, 0x4]}, &(0x7f0000000680)=0x100)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$setpipe(r10, 0x407, 0x0)
write(r10, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47)
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000240)={0x0, 0x8, 0x0, &(0x7f0000000180)=0x4})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x6, 0xdf}, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r11 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @broadcast}, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f00000002c0)={0x0, 'vxcan1\x00', {0x1}})
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
gettid()
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
write(r12, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r13, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000100)={r13, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f00000003c0)={r13, 0x65, "38bbdf7a9b2496020a5e1be061eada0257a1f8f8168606bc5e32f812adad953b14cc3dbe2bf70970cb270ffe4d78ce943adb4d69c81d4131f7a0b32a28b51d5e83722875f2f7903cb0b104c03b379378ded06a843ef40b1e76ed69847f73e4fa956bffde4b"}, &(0x7f0000000300)=0x6d)
open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0)

11:02:57 executing program 5:
pipe(&(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x10, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'s{z\xe6ten\x00\x00L\xb60\xc4\x06\x00\x02', <r6=>r5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340c000014000b0d3f000000000000000a400000", @ANYRES32=r6, @ANYBLOB="140001000c"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1013.518681] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1013.547159] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1013.560473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1013.639808] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1013.680433] protocol 88fb is buggy, dev hsr_slave_1
11:02:58 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
socketpair(0xa, 0x7, 0x1f, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket(0x0, 0x80002, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10002, 0x0, 0x102, 0x8000003}, 0x20)
connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x0, 0x2})
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22048002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x88, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x6000081)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00fddbdf250200"/16], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7)
tkill(0x0, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffe0000000000, 0x0)
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x0, 0x8, 0x0, "0284570d6b54312300000000000000000000000007001400"})
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {0x0, 0x0, 0x0, 0xa}]})

[ 1013.880678] protocol 88fb is buggy, dev hsr_slave_0
[ 1013.885809] protocol 88fb is buggy, dev hsr_slave_1
11:02:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef24ac84686f145d, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b7576cd4653892fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2685487b623389f7c277520e1a9688acb70e6d731228c09e1bd971c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1000000c747ad294c0fe9b0358961b9f67b37c25dc7660991da91d7a79667a1d666b1cf1b0d5be757da79eca1a9df66984e1828c47c8a490c2e8de390513704b5c6f36e8842bb29b7d84bc69fd9be5cd22b1d305fecc09ff238c04ee0b5f26d7496aaa69bd181ba9f5f49b85d205b2bb77f87f728535d15133bdaf02572c7343aa106b7c226a385d745ce09af0057af3fff43b51365f3d3819448"], 0x14f, 0xffffffa7}}], 0x1, 0xc000)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0xc8, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0xc8, 0xffffffa7}}], 0x1, 0x80)
close(r2)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x200, {{0x2, 0x4e22, @local}}}, 0x88)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18, 0xffffffa7}}], 0x40000000000037b, 0xc000)
close(r1)
r3 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x80000000, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x24}, 0x9}, @in6={0xa, 0x4e24, 0x3ff, @local, 0x8001}, @in={0x2, 0x4e22, @remote}], 0x187)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r8=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x8619}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x7f, 0x1, 0x197bad49ec620078, 0x7d3, 0x80, 0x9, 0x0, 0x3, r8}, 0x20)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0xb6}], 0x80000, 0x0)

[ 1014.295382] netlink: 3080 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1014.361099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.374743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
11:02:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x03H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:02:58 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r1, r0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x2, 0x40)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x8000, 0x0)
r6 = socket$inet(0x2, 0x1, 0x9)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80400, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x2000}, {r3, 0x4100}, {r4, 0x2}, {r5, 0x2}, {r6, 0x80}, {r7, 0x90}], 0x6, 0x0)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r10)
r11 = socket(0x10, 0x2, 0xc)
write(r11, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r8, 0x0, r10, 0x0, 0x4ffe0, 0x0)

11:02:58 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x44)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
link(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
utime(&(0x7f0000000080)='./bus/file1\x00', 0x0)
ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@default, @default, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
unlink(&(0x7f0000000140)='./bus/file0\x00')

11:02:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef24ac84686f145d, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f, 0xffffffa7}}], 0x1, 0xc000)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0xc8, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0xc8, 0xffffffa7}}], 0x1, 0x80)
close(r2)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x200, {{0x2, 0x4e22, @local}}}, 0x88)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18, 0xffffffa7}}], 0x40000000000037b, 0xc000)
close(r1)
r3 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x80000000, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x24}, 0x9}, @in6={0xa, 0x4e24, 0x3ff, @local, 0x8001}, @in={0x2, 0x4e22, @remote}], 0x187)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r8=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x8619}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x7f, 0x1, 0x197bad49ec620078, 0x7d3, 0x80, 0x9, 0x0, 0x3, r8}, 0x20)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0xb6}], 0x80000, 0x0)

[ 1014.452164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.533784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.593710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1014.614136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.632431] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1014.645777] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1014.652751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.669684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:02:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$describe(0x6, 0x0, &(0x7f0000000040)=""/39, 0x27)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x4, @dev}, @gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x40}}, 0x0)

[ 1014.706169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.731832] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1014.777198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.813511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.842297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
[ 1014.857530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30737 comm=syz-executor.5
11:02:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x04H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1015.020855] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[ 1015.057912] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
11:02:59 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
r0 = socket(0x10, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c7ff0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={<r1=>0x0, 0x1c, "8c68a4f647bf62c5eda3f1c3be45596726616ee22d0ad50deda0f4cc"}, &(0x7f0000000580)=0x24)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x9, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000700), 0x100000000000000c)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000001c0)={r1, 0xf9, "9648545e87d56e85aff2281cacb099f181914f1d6dfae2200ea159a5f99988bb74a4ee46a8f2f44109754da877b3dcee3a72f7a733b97b7b29c057db19812db3271979f1499af4630aa5cbf2abe973f9f387fa813d2040a1d937312bd2014d129522d32649846911f1a02c45b090287cf8d7ff998ff79051fe7ae347ce0b4cdaf82b9ed65824984973cb7c41e862b2c48a78f0da73b9d6430525c823dc6144b6bcf46e4a95d5f1fe154f04403e2205279cfc0a423a2f0ef8a83681498c84ce115ff0a111ded6d2ef1c42a257e120b072bf0599551f5649e75cbc44ca94ef975bb2696b3c0ffb05f9b7bfbab73c7f2097187ced0c6604d27f84"}, &(0x7f0000000000)=0x101)

11:02:59 executing program 5:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x400040)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r2, r1)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000700)='trusted.overlay.origin\x00', &(0x7f0000000740)='y\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
fcntl$setown(r2, 0x8, r4)
syz_open_dev$vcsu(&(0x7f00000006c0)='/dev/vcsu#\x00', 0x4fd31037, 0x4)
ioctl$KDMKTONE(r0, 0x4b30, 0x1000)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)={0x7, <r5=>0x0, 0x10001, 0x80000000})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000680)={0xfffffffffffffabe, r5, 0x2, 0x869})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r6=>0x0)
open(0x0, 0x0, 0x0)
r7 = open(0x0, 0x0, 0xcffe698e13f215f9)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000600)={0x1, 0x1, 0x0, 0x7, 0xdd, &(0x7f0000000200)})
timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)
r8 = dup3(0xffffffffffffffff, r7, 0x80000)
getsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000140)={@local, @loopback, @remote}, &(0x7f00000001c0)=0xc)
clock_nanosleep(0x2, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0)

11:02:59 executing program 3:
syz_emit_ethernet(0x61, &(0x7f0000000040)={@link_local, @dev, [{}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @igmp={0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7fff, 0x20000)

11:02:59 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
close(r0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x88a1082b78d364b3, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x24}}, 0x20)

[ 1015.177382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1015.191146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1015.226253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:02:59 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="f36cfe076b4a92aba5f7aacd6a79194e"}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5cd23cae}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4b8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4f7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0xf244a40eaf2587d8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0xb}]]}}}]}, 0x40}}, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000000))
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4004ae8b, &(0x7f0000000080)=0x8)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r10, r6)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$LOOP_SET_FD(r5, 0x4c00, r10)

11:02:59 executing program 4:
pipe(&(0x7f0000000100))
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pkey_alloc(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
setitimer(0x0, 0x0, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
socket$alg(0x26, 0x5, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2, 0x1000000000000002, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000821ff0), 0x10)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ftruncate(r4, 0x7f)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)

11:02:59 executing program 3:
r0 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f91666b93d20ca8f83d9cced9e34e7d843976e821bd4c9e04997ea210181451b383f21435cb49840b0f61274420a5c97000000000000000000"], 0x4}}, 0x0)
connect$packet(r1, &(0x7f0000000500)={0x11, 0x9, r3, 0x1, 0x1, 0x6, @remote}, 0x14)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x101}, 0x0)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r10, r9)
ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000400))
r11 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x7, 0x20, 0xff, 0x0, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x80000000, 0x57}, 0x404, 0x5, 0x10000, 0xc, 0x0, 0x5, 0x40}, r6, 0xfffffffffffffffe, r11, 0x2)
r12 = getpgid(r5)
r13 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGSID(r13, 0x5429, &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x40, 0x1, 0x7f, 0x20, 0x0, 0x2959, 0xa00, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x88a10b625b231a82, 0x0, 0x4, 0x1, 0x6, 0xe3d, 0x7}, r12, 0xf, r0, 0x1)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x8426f52fb8cd768c, 0x0)
ioctl$GIO_UNIMAP(r11, 0x4b66, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})

11:03:00 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x1}]})

[ 1015.784023] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
11:03:00 executing program 3:
socketpair$unix(0x1, 0x6, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
name_to_handle_at(r1, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x8}, 0x0, 0x600)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0)
open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00b6721af691ae661785a110ba385e327d8714a1145a7bfe4f25eb2377fa7b340f070000000000000064acd96802e1a1be0072940a7c909c697a19e49fbb8d1b0fbaf7bfa2518d450e969ea5b1eb0492433b01f8ffffffffffffffa83df29186cc60800063"])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mountinfo\x00')
ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000002c0))
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0xbe, 0x1, 0x0, [0x0]}}, 0x29)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

11:03:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x05H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1015.855910] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
11:03:00 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r0})
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x3, 0x80000, 0x0)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7ff, 0x4)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)={0x2, 0x0, 0xffffffffffffff0b, 0x20000, 0x0, {0x77359400}, {0x2, 0x1, 0x3f, 0x5, 0x0, 0x1f, "010100"}, 0x7fff, 0x1, @fd=r9, 0x10000, 0x0, <r10=>0xffffffffffffffff})
ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f0000000180))
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1016.013135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1016.013729] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:03:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x7)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0)
sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001a0007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[ 1016.055019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:00 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89a1, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x44000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7302})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7302})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x20}, {0x6, 0x0, 0x0, 0x3000000}]})
syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x1000, 0x840)

11:03:00 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000140)={0x20, 0x11, &(0x7f0000000100)="31e546c3735708b77dd27bb7865faa46457aade026811f18174c94c0645b86cb16cae8eee9fea5", {0xf105, 0xc3, 0xe3edab94, 0x5a0648d49438cb4c, 0x7fffffff, 0x7f, 0x4, 0x800}})
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)

11:03:00 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x7b, 0x0, [0x4b564d03, 0x1001]})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0xae80, 0x0)
r4 = dup3(r3, r0, 0x180000)
ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240))
r5 = dup(0xffffffffffffffff)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/de\xf1\a\x00\x00\x00q\x93\xac\xec\xfd', 0x0, 0x200000)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000300)={0xfc77, 0xfffc, 0x7, 0x1, 0xe9, 0x5})
creat(&(0x7f0000000080)='./file0\x00', 0x20)
sendmsg$DEVLINK_CMD_GET(r5, 0x0, 0x40000)
r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100))
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0x40, &(0x7f0000000180)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54)
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200))

11:03:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x244, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x21c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x20c, 0x2, [@tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x14, @ipv4={[], [], @multicast1}}, @IFLA_IPTUN_REMOTE={0x14, 0x12, @ipv4={[], [], @dev}}, @IFLA_IPTUN_LOCAL={0x32, 0x2, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="6c188a44711625f7e8e5d070c39a513b"}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}], @tunl6_policy, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_LOCAL={0x14, 0x4001, @remote}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0xfffffffffffffcdb}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_TTL={0xffffff75}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_FLAGS, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x115}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x51}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x244}}, 0x0)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)={0x2b, 0x4, 0x0, {0x4, 0x1, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x4, 0xffffffff7fffffff, 0x690, 0x8001, 0x7fffffff, 0xffff})
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\b\x00i', @ANYRES16=r7, @ANYBLOB="040028bd7000fddbdf250300000008000100000000000c00020008000000000000000c0004008000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22048002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x88, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x6000081)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x1000, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
pipe2(&(0x7f0000000000), 0x40800)

[ 1016.576901] IPVS: ftp: loaded support on port[0] = 21
[ 1016.612492] netlink: 'syz-executor.5': attribute type 20 has an invalid length.
[ 1016.628131] netlink: 'syz-executor.5': attribute type 18 has an invalid length.
11:03:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x06H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1016.654230] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1016.721024] netlink: 'syz-executor.5': attribute type 20 has an invalid length.
[ 1016.759202] netlink: 'syz-executor.5': attribute type 18 has an invalid length.
11:03:01 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
pipe(&(0x7f0000000000))
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1016.785575] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1016.863051] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1016.883487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1016.899899] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1016.906991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\aH\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1016.946314] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000240)="639c992b94f9702cc184bb1d540dce9b9d668bc233c15483e9dc5aba0b6b4e7fa209", 0x22, 0xffffffffffffffff)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)

[ 1017.368896] encrypted_key: master key parameter '' is invalid
[ 1017.499927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1017.511684] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1017.518007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x4000000000035, {0x0, 0x8, 0x3, 0x0, 0x0, 0x100}})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4004)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xc8800, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/`ev/s\x05\x00/seq\x00', 0x0, 0x4000)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000180)={0xb9, 0x1, &(0x7f00000002c0)="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"})
ioctl$UI_DEV_CREATE(r0, 0x5501)

11:03:01 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e)
syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f00000000c0)='./bus\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)='vfat\x00')

[ 1017.581668] encrypted_key: master key parameter '' is invalid
11:03:02 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet(0x2, 0x0, 0x1f)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:02 executing program 3:
socket$inet(0x10, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x1, 0x4)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
socket(0x10, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)={0x20000008})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a6)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000340)={0x0, 'ip6gre0\x00', {}, 0x7})
socket$netlink(0x10, 0x3, 0x9)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffffffffffc68, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[]}}, 0x24048008)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000400)={0xff}, 0x1)

[ 1017.705660] NFS: bad mount option value specified: vfat
11:03:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet6_int(r3, 0x29, 0x35, 0x0, &(0x7f0000000140)=0x175)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, &(0x7f0000000140))
recvmmsg(r0, 0x0, 0x119, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
syz_open_procfs(0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0), 0x4)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x3, 0x212802)
syz_open_dev$audion(0x0, 0x0, 0x0)
getpid()
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2002, 0x0)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
accept$netrom(r3, &(0x7f0000000480)={{0x3, @rose}, [@bcast, @remote, @rose, @null, @null, @rose, @netrom, @bcast]}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x3e2d9ee1cd30f13e, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4080, 0x5801}], 0x1, 0x0, 0xf080}, 0x1)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = socket(0x10, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
getsockopt$nfc_llcp(r9, 0x118, 0x0, 0x0, 0x0)
r10 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_DECODER_CMD(r10, 0xc0485660, &(0x7f0000000300))
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[ 1017.784173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1017.935886] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\bH\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1018.483808] NFS: bad mount option value specified: vfat
[ 1018.570734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1018.621653] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1018.628864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1018.989700] IPVS: ftp: loaded support on port[0] = 21
[ 1023.301260] device bridge_slave_1 left promiscuous mode
[ 1023.306811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.381556] device bridge_slave_0 left promiscuous mode
[ 1023.387057] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.712319] device hsr_slave_1 left promiscuous mode
[ 1026.753673] device hsr_slave_0 left promiscuous mode
[ 1026.793691] team0 (unregistering): Port device team_slave_1 removed
[ 1026.805640] team0 (unregistering): Port device team_slave_0 removed
[ 1026.816582] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1026.867387] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1026.950618] bond0 (unregistering): Released all slaves
11:03:11 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x5)

11:03:11 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sendmsg$unix(r5, &(0x7f00000003c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="a512523147ed456485f67c302a69df88d258f79f0933354ec435426bcec1c1224b0b171b3f7601fe25c1db50775f2daa14f456c87115c66c9976aee3c5e1811e2d3a75eb50ab2644dde9078e8bb2cae229188e1324ed571c5ff6e0fb043589878167adc4988f4faf0cfba3865f2dc9130e871e8c18bf59d88026c1a722aed61f2e66390ed633e73b3e2b1cf5e7cffc8d469181aebb71a642665b9a32c9499266bc187bc20d", 0xa5}, {&(0x7f0000000080)="a51f96b8515c2e82e3e566db7c4848c3dd056dd4d5da5d526b157c2751ce5441fa13ef4b1e5c293dc02ab491fac7c87057bb923f98910064979e285b13a54ffe34fb", 0x42}, {&(0x7f0000000240)="b201bd45d4130ac597b5cddcc8fd7511d3dba91599a1f183d21de89c6f8ee58b40bfc4421c18233ee1355ba9e59425a5dd09b74910fe62af622b10d69fa734a71586f5e80aabf56d612c7af7c06188f01aa124cbf416eba6054f2f7e07eeb528bd1c583ad9e2da6280983d3e62fcec9bd38b91069fcd2571da27d9966efb302eed44e333e210854d4f357dc8cb4a95f8b7056f2713c709f2a545e5be42a8630e36b93dd584a8b1f7462034f196c9859720056df401ddf995", 0xb8}, {&(0x7f0000000300)="67d78442086a32f6fcb9eef2c8048774a56ac944426c61b1c372747f2885b93025c17d38f5bce07aa6b15ab96af14db50a68c6a75eb830fc62a40a0c3935", 0x3e}], 0x4, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee01}}}], 0x20, 0x40000}, 0x81)
r7 = socket(0x10, 0x2, 0xc)
write(r7, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:11 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KDGKBENT(r4, 0x4b46, &(0x7f00000000c0)={0x40, 0x1, 0x2})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x0, 0x0, 0x1000, 0x0)

11:03:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000400000/0x4000)=nil, 0x4000)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @random="37f20f5353c0", 'veth1_to_bond\x00'}}, 0x1e)
ioctl$RTC_WIE_OFF(r2, 0x7010)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

11:03:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L`H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:11 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000380)={<r11=>0x0, 0x80000, r4})
r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r14 = dup2(r13, r12)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$DRM_IOCTL_GEM_OPEN(r14, 0xc010640b, &(0x7f00000003c0)={<r15=>0x0, 0x0, 0x6})
ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000400)={r11, r15})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000280))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r16 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r17 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r18 = dup2(r17, r16)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r18, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$TIOCSISO7816(r18, 0xc0285443, &(0x7f00000002c0)={0x8, 0xffffd628, 0x99, 0x1, 0xca})
syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2)
r19 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r20 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r21 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r22 = dup2(r21, r20)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r22, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SOUND_MIXER_WRITE_RECSRC(r22, 0xc0044dff, &(0x7f0000000340))
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r19, 0x415, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, [""]}, 0x24}}, 0x4010)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

11:03:11 executing program 0:
close(0xffffffffffffffff)
io_setup(0x0, &(0x7f0000000140))
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video36\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10010, r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
gettid()
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = dup3(0xffffffffffffffff, r6, 0x80000)
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8983, &(0x7f0000000180)={0x8, 'bridge_slave_0\x00', {'caif0\x00'}, 0x8000})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000/0x400000)=nil, 0x3000, 0x1})
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}], 0x12}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='c\xd3\x16[lOJi\x9e=C\x01<-\xe6')
syz_open_dev$sndctrl(0x0, 0x6d, 0x80000)
socket$inet6(0xa, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c)

[ 1027.488331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1027.511221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1027.567800] kauditd_printk_skb: 2 callbacks suppressed
[ 1027.567818] audit: type=1400 audit(1577271791.923:8972): avc:  denied  { map } for  pid=30953 comm="syz-executor.0" path="/dev/video36" dev="devtmpfs" ino=18203 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=chr_file permissive=1
[ 1027.610704] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1027.635064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:12 executing program 0:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2200, 0x0)
fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2c7f6f7765726469723d2e3a4a696c6530"])
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

[ 1027.857462] overlayfs: unrecognized mount option "owerdir=.:Jile0" or missing value
[ 1027.933419] overlayfs: unrecognized mount option "owerdir=.:Jile0" or missing value
11:03:12 executing program 0:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
getresgid(0x0, 0x0, &(0x7f0000000180))
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000a80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x48}}]}})
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c8, 0x4e0, 0x0, 0x3c8, 0x3c8, 0x268, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f00000001c0), {[{{@ipv6={@empty, @mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0x1fe000080], [0x0, 0xffffff00, 0xff000000, 0x1000001ff], 'vlan0\x00', 'bpq0\x00', {0xff}, {}, 0x5c, 0x1, 0x4, 0x3a}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@set1={{0x28, 'set\x00'}, {{0x2, 0x3, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1f, 0xf9, 0x2}, {0x400, 0x5, 0x1}, 0x5, 0xa6}}}, {{@ipv6={@loopback, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'bridge0\x00', 'sit0\x00', {0x70e6aab370e3c1de}, {0xff}, 0x88, 0x87, 0x5, 0x2e}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0xfffffffa, @ipv4=@multicast2, 0x36, 0x35, 0xb44}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x0, 0x3}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x6, 0x2, 0x1, [0x4, 0x8, 0x6, 0x5, 0x7, 0x0, 0x3e, 0xfffd, 0xe6b8, 0x68b, 0x6, 0x7, 0x4, 0x9, 0x2, 0x1], 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@ipv4={[], [], @remote}, 0x14, 0xd, 0xf39f}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@mcast1, 0x20, 0xa, 0x5}}}, {{@ipv6={@local, @loopback, [0xff000000, 0xff, 0x1fffffe00], [0x0, 0xffffff00], '\x00', 'ip6erspan0\x00', {}, {0xff}, 0x2f, 0xab, 0x1, 0xd4}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@rand_addr="7c0b7e29d3b326587a659b4e1854e212", 0x36, 0x37}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

[ 1028.085275] audit: type=1804 audit(1577271792.443:8973): pid=30970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/46/file0" dev="sda1" ino=16514 res=1
11:03:12 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000040)={0x80000000, 0x1, 0x4, 0x400, 0x3, {0x77359400}, {0x53f54c50968f589a, 0x1, 0x61, 0x80, 0x3, 0x7f, "15c8830d"}, 0x4800, 0x3, @planes=&(0x7f0000000000)={0xc51, 0x6, @fd=r0}, 0x6c4, 0x0, r9})
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\xfdH\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:12 executing program 5:
gettid()
socket$inet(0x10, 0x2, 0x0)
epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr$security_evm(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000003c0)=@sha1={0x1, "20cd46ae434c6976d4440901cab6a57b17a1f38b"}, 0x15, 0x4)
r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46600)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000840)='./file0\x00', &(0x7f0000000080)='./file0\x00')
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
ioprio_get$uid(0x3, r3)
ioprio_get$uid(0x3, r3)
r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$keyring(0x0, &(0x7f0000000800)={'syz', 0x3}, 0x0, 0x0, r4)
keyctl$get_persistent(0x16, 0x0, r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000"], 0x48}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000136bbafc02000000744e9bca7e53de703c03b5da7afbf54466622e997ce5da225f35516cf8c27523387e1832522ee531b61a03a1edb51bc7c2d7843e7b58a845879a9164ba6eb370ec3b2ad376bf68bcbbe30100f52c686e4fca945a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r12, r11)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r12, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r13 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r14 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r14, r13)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESDEC=r13, @ANYRESHEX=r10, @ANYRES16=r0, @ANYBLOB="e6a296c1311fbbf05186dd305b81d2efccc777f4d540a3965a3e0b62e4fef2b5d59175abc68b4e0dec3d7b6af4a36871190b781e3c5cd0eea40345502e8064a9bd6e02a8f5cf5c0bafe85ba09a9116019a884b3f295ed85ee439e5bf89bf462ffcafe66419ee44825bb78bb99fd5dce5d3deed5423bbcf0061e1a7304571ef14bf5589f10017c7942831af2e12443d283f7b08b49aaf5dfbb9dfe64032f01908d315d71eb0a0ee6ae9"], @ANYRES32, @ANYBLOB="a421af0893d8a28b956486cda3d28896ac51f6ddba30df361064251315dca9fae3a2b101d9b59283ca97bbaec99ac8d02664dcf4273c944e1c5c43487abcd7b90f35db1be51ebd9455796640144b4fd4775c933247c15457a6add5adcc53cabefcadb9ad2641a5d457082eb84837d0429308f4b91112491effa78ce156cf033ff6ebc4b675f8a866bf556bad2188b9c99f82d9f8b4"]], @ANYRES32, @ANYBLOB="00001600ffffffff000000000c0080eb8600000075701000200002001c00020005000000800008000500627066f1040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483567b19c323679afde2698ebe5f83bc5b1d2c1df3870e465324963062184249a0e583c75ba0a6d8da2ca131e39aeef0f"], 0x3}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r16 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
bind$packet(r16, 0x0, 0x0)
getsockname$packet(r16, &(0x7f0000000500)={0x11, 0x0, <r17=>0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@bridge_setlink={0x2c, 0x13, 0x1c27850c92dacf45, 0x0, 0x0, {0x7, 0x0, 0x0, r17}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0xa}, {0x8}]}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r15, 0x0, 0x0)
dup(0xffffffffffffffff)

[ 1028.419455] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1028.541930] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1028.879020] audit: type=1804 audit(1577271793.233:8974): pid=30971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/46/file0" dev="sda1" ino=16514 res=1
[ 1028.936856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1028.955462] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1028.971949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="240000001a005f0414f9f407000904000a002000000000000000000000001b003a000000", 0x24)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000040)={@mcast1, <r4=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000100)=ANY=[@ANYBLOB="f40d0000650012702abd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0200f3ff020001000e0010000c0001006261736963000000c40d0200500003004c000b00000008000100637400000c00020008000300000000003000060068ffd961a4df7315e57cfe4b1758008e4b9a1c6f60d6a730fe937984605dc978d69adeecb83d18433200000000000c00040008000400df0000005c0d0300580d120000000c000100706f6c6963650000980c0200040403000000000004000000ff000000400000000300000002000000010400004f00000000000000aa6400009512000003000000000800002000000009000000010000009e0000000100000000000100080000000100008000000000d4f84c7800010000a10000000002000002000000030000000700000005000000ff070000ff0100000000000000fcffff06000000cbf7000007000000040000005304000009000000e10000000180ffff04000000f27d00000700000006000000080000000900000000000000bd040000080000000004000004000000050000000400000006000000ff0f00000101000001000100f8ffffff0400000005000000ff010000966c00000100000009000000ff010000800000000400000001000000ffffffff0300000002000000040000004b31000009000000400000000600000006000000ffffffff070000000900000003000000040000007e0e000001f8ffff90000000cf02000009000000060000000400000002000000040000000600000008000000060000000400000006000000a102000004000000ff070000020000000000008009000000010000003f00000002000000050000000100000081000000060000000001000001000080070000000500000000000000090000007c9400000000c802ff0700000400000000000000b10000000900000047fbffff00000000ff01000003000000ff0f0000cddb00002000000001000080ff0000000100000009000000eccd0000c20100000800000001000000000000000800000001000000de0000006fe50000810000000700000001000000010000000400000000020000050000000000000000010000f8ffffff0000008006000000010000000004000008000000020000000200000004000000200000000104000005000000000400000300000000100000ffffffff20000000050000000900000008000000394f00000600000002000000010001000000000006000000000800000500000003000000010000000000000000000000b6e40000c10500007f0000007c030000080000000001000009000000ff0300000600000001000000000000000000000001800000000200000300000001010000000000800000000008000000010000001f0000000900000003000000010000008d00000000000000020000004403000003000000ffffffff810000000200000000000000faffffffc5d70000070000000080000008000000060000004000000009000000ff000000040000000180000008000000080000000900000005000000001000000001000001000100e107000008000000000000001f00000007000000090000003f000000ada70000ffffffff040000007e0100003ea200000100000001000000ffff000005000000010400000100008000040000010400003c0001009f000000070000000000000001040000030000006b020800030001008f8b000003011f00d26705a8090000000300000001000000010001000404030000000000010000005eab372b01000000ff010000cb4000008d0a0000ff0300002000000005000000ff000000ff7f0000c50600005201000004000000050000000700000000000000e0000000040000003f0000000001000069000000090000000010000005000000f7ffffff05000000010000000800000020000000ffff00000800000004000000a0000000bbf9ffffe000000006000000000001000300000005000000040000000600000008000000070000000600000007000000010000001f000000990000003f00000081000000ba00000003000000001000000500000000000000030000000100000040000000030000000000000000000000070000006b0000003b0000005cc200007f0000008d00000009000000030000007d550000c0000000642f941e0000010001000080060000000400000001000100010001002c000000488d00000008000005000000010000807d0000009f18000003000000ff0700000500000000000000950d000020000000060000006d0800003b0000000400000001040000482cffff09000000cc00000004000000018000000800000006000000faffffff0080000000002800080000000600000009000000ff03000002000000d1000000200000007f0000007f00000001feffff00000000da00000081c500008000000023b70000b200000001000080020000000200000008000000090000000100000002000000ffffffffff000000020000000000000041e30000f8ffffffff000000050000000200000000000000070000004d0000005c0c000059000000020000000100000083dc0000ff0000000000000091bf000000000000fbffffff020000000100008002000000c80000000100000006000000d7de000008000000fd0000000700000003000000080000003002000000080000b43a00000010000081ffffff01fcffff00000100000001000400000009000000018000007400000003000000000000802000000000000080e90000000400000009000000ff00000009000000ad7bc07506000000000000800400000026280000090000008100000000000000030000000100000006910000ff0f0000030000000000008007000000060000000600000000000000ffff0700000800000000800000040000008f000000c12e00000dc000000500000004000000ff030000030000000600000000ffffffff070000ff0700000000008c010000000600000005000000200000000600000004000000090000000de2000008000000a7180000750000000200000000070000030000000900000003000000be0000007c4c0000000100003f00000097b90000d20200000200000081000000010000000700000000000000200000000000000005000000070f00000800000000800000020000005f0000003c0001000100008000000010060000000000000202000000a300ff0f010104000800000007020600ff0f040009000000040000000800000040000000080004000500000008000400f8ffffff040403007e0000000200000000800000000000000800000000080000206f000000000000ff01000001040000050000000700000003000000190000000700000008000000fa5200000180000001010000070000000800000007000000a70d0000feffffffff0000000800000007000000a5000000010000008100000009000000070000000000000001000000dc000000ff070000010000008100000000000000090000003f020000200000000000000009000000f7ffffffff070000010001000000000009000000000000000080000001fc00001885000078000000ff0f0000f7ffffff02000000040000000400000040000000ff0f00000002000000080000030000000000000008000000070000000004000007000000000000000000000007000000050000001f00000003000000070000009b0c0000050000000100000005000000090000000180000008000000070000008900000009000000050000000000010007000000200000002000000001800000000000000080000059ffffff843b000000000000ff030000e80a00000f00000000ffffff1bf000000900000040000000ff0700000300000000000000ff0700004b00000004000000ff0000000800000009000000ff07000000020000ae32000002000000ffff0000ffffffff9c0f000005000000060000000080000000000000f8ffffff01800000b04f00000500000001000080020000000200000002000000ff7f0000850000007f0000006088000004000000ffffff7f5f00000000000000ff0000000900000006000000dd010000ff0700008c000000030000000500000044f900004000000007000000000400007fffffff06000000000000007f000000090000000000000000010000060000003f000000000000000900000001000000310e000008000000ecffffff216600006400000004000000040000000000000007000000060000000300000002030000b30900000500000000000100010000000800000006000000c223080d00000080050000003f0000004600000002000000ff0700000700000000000000fffbffff863a000000000000040000000200000007000000d10900000300000000080000050000000400000004000000bb00000000000000090000007f000000fdffffff0100000000000000050000002000000002000000ff010000040000005efdfffff7fffffffaffffff0000000000100000df000000416a0000d30000000000008003000000090000000400000003000000040000000200000008000000ff030000090000000200000081000000020000001009000001010000010100000cd100000100000002000000fbffffff001000000060120006000000008000003f0000000008000000000060040000000080000000040000000000000200000000000100ac000600ebbfc909cea7faad225089d14e4cdabbabb6ba57a62d6aa2c44467e97d35738835488dbe7ea147195d0229822e582ebf684a6130724c334388ff4ac417aaf22d56de5be7b17aaa21273bc6e30fef9a2f9ef178940ea36eef9e274f30cbfabb21f930600b4e0bf247778dc0c892bfee7c21d94768f1bd46b918a678f4a355991af9e98c9b0943a5b34c18d219d32e6bb28101daf73781587ba146884dab59a8c782b8201d4dbbc10e000008000100f9fff1ff"], 0xdf4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2005800)

[ 1029.078886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1029.134364] selinux_nlmsg_perm: 5 callbacks suppressed
[ 1029.134379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29487 sclass=netlink_route_socket pig=30989 comm=syz-executor.0
11:03:13 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockname$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10)
r6 = socket(0x10, 0x2, 0xc)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x800, 0x0)
getsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)
write(r6, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1029.318911] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1029.340496] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1029.724729] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1029.737581] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1031.052841] IPVS: ftp: loaded support on port[0] = 21
[ 1031.115398] chnl_net:caif_netlink_parms(): no params data found
[ 1031.147508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.154392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.162135] device bridge_slave_0 entered promiscuous mode
[ 1031.169081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.175639] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.184009] device bridge_slave_1 entered promiscuous mode
[ 1031.201595] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1031.212050] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1031.227920] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1031.235678] team0: Port device team_slave_0 added
[ 1031.242268] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1031.249820] team0: Port device team_slave_1 added
[ 1031.255563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1031.263190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1031.342202] device hsr_slave_0 entered promiscuous mode
[ 1031.380627] device hsr_slave_1 entered promiscuous mode
[ 1031.421074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1031.429287] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1031.444464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.450879] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1031.458942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.465368] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1031.498243] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1031.506226] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1031.515614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1031.524961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1031.532379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.540432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.547599] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1031.557807] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1031.565362] 8021q: adding VLAN 0 to HW filter on device team0
[ 1031.575432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1031.583380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.589737] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1031.599943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1031.608358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.614951] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1031.634722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1031.644551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1031.653240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1031.664207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1031.679123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1031.689890] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1031.696180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1031.704187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1031.718467] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1031.727148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1031.734297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1031.746378] 8021q: adding VLAN 0 to HW filter on device batadv0
11:03:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\xfeH\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:16 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6974656261636b2c0077bc7a39a25c590ef7e11327f44f6a47bb05a4b8f87efc727a78d28dd6603c2d9e1858af8f36a74a80c0b994b33aea40c71771cc1891fc4cdc7844be63c950b65c4077d9229f1d7719913eef3af1f95fbd2755d20e1d13d74a8c630bb5446a12a66621be66d83763cd945224c1459755b4a1deaf0814eb2761e4fda865aa1e3bdfdd3aff329ef439ecd23e6b7300d0b3e45153209d046e6964d0463aa540ef0ad1d45bcd46601df7c7da2737b3552f127f725d7957a3d61038acaf5615843847017ce859effb5de6c2f48301e30ff1a296eab0aa2d110c090000000000000044093470ca552e0fc058c0a89b7d8b1d20"])

11:03:16 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="2400000000000000290000002b0000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
getresuid(&(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100), &(0x7f0000000140))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000140)=0x30f)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20}], 0x1, 0x0)
getgroups(0xa, &(0x7f0000000180)=[0xee01, r6, 0xffffffffffffffff, <r7=>0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff])
write$P9_RGETATTR(r3, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x1c0, {0x0, 0x0, 0x5}, 0x1, r4, r7, 0x8000, 0x8001, 0x3, 0x4, 0xfffffffffffffff9, 0x8000, 0x7, 0x2, 0x8000, 0x8, 0x8, 0xffff, 0x2, 0x11, 0xffffffffffff1797}}, 0xa0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x4498f)

11:03:16 executing program 2:
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0)
clone(0x1000000000011, &(0x7f0000000040), 0x0, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
waitid(0x0, r0, 0x0, 0x20000000, &(0x7f0000000140))
r1 = dup(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0200cb113a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10a9fc2c8855720e, &(0x7f0000000340)={@empty, @initdev, <r7=>0x0}, &(0x7f0000000380)=0xc)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
accept$packet(r9, &(0x7f00000003c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'team0\x00', <r11=>0x0})
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r12, 0x0, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
r14 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r15 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r16 = dup2(r15, r14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r16, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r17 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r17, 0x0, 0x0)
getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r18, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000001bc0)={'veth1_to_bridge\x00', <r19=>r18})
r20 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r20, 0x0, 0x0)
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r21, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002e40)={<r22=>0x0, @empty, @dev}, &(0x7f0000002e80)=0xc)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r24, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
r25 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)
getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, <r26=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="49742f24ff03441738b32d305f8bb982c0b6dbc950ed31294680216de0941c", @ANYRES32=r26, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000002f40)={0x11, 0x0, <r27=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002f80)=0x14)
r28 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r29 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r30 = dup2(r29, r28)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r30, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_pktinfo(r30, 0x0, 0x8, &(0x7f0000003080)={<r31=>0x0, @multicast1, @broadcast}, &(0x7f00000030c0)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000003580)={@ipv4={[], [], @multicast2}, <r32=>0x0}, &(0x7f00000035c0)=0x14)
r33 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r33, 0x0, 0x0)
getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, <r34=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r34, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000003d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003600)={0x6ac, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x13c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7929}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xc23}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x144, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x2, 0x1, 0xbf, 0x2}, {0x9, 0x8b, 0x40, 0xfffffe01}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r21}, {0x184, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6aff9e8e}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r27}}, {0x8}}}]}}, {{0x8, 0x1, r31}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r32}, {0x1e8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r34}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xeef}}}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x3bd683ef75c3553}, 0x10000)
r35 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={<r36=>0x0, @in={{0x2, 0x4e24, @rand_addr=0x7f}}, 0x4da6, 0x9}, &(0x7f0000000100)=0xfffffffffffffeb9)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r35, 0x84, 0x6, &(0x7f0000000200)={r36, @in6={{0xa, 0x4e22, 0xffff1830, @loopback, 0x559}}}, &(0x7f00000002c0)=0x84)

11:03:16 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0)
close(r2)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x4000}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x1f, 0x0, "3ae7e38707b3e6bae50f59ddc84d705565f99a334f87c8c226d8de368a0419cc02d6f678585a6e40ed5b05b57860245fd79866a6ef4b44e6d747b9a1a23b1293cd422d3fcaa570135b343b43f8d8625261f825c6b625e9410173300668401a9ccc39b494d8d695d1b4e0c3f799a1cfb87eb812d430c4cd346647cdee433b9a2d82bf2fd5e52bbf276c80b2ddd1fbe75a9231b016d89ff6d6b32d14f14bd04d338f28a6487a30538a3f5750090093b3e17173083b1403d7b099648ed05247f1e38e73cd46571cc4d419b664267e61db14aaa6d348d4e137e40cd236f99d502d1d3bd94c7883e03f8521c53a12fee4b0526dc2480af40884bd49fbafce2319b0ee", 0x3, 0x48, 0x2, 0x6, 0x0, 0x3, 0x2, 0x1}, r7}}, 0x120)

11:03:16 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7)
r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4)

[ 1031.956766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1031.961393] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:16 executing program 5:
r0 = socket(0x200000000010, 0x5, 0x0)
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f00000012c0), 0x0)
getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600)=""/143, &(0x7f0000000280)=0x8f)
socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00')
syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4)
sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x10000000000000f5}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01040000000008000000110400000c0044d838e772da19090021"], 0x20}}, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0))
r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000800)={0x2, 0x0, @pic={0xff, 0xc, 0xfc, 0x1, 0x3, 0x1, 0xc6, 0x81, 0x0, 0x63, 0x3, 0x0, 0x8, 0x0, 0x1a, 0x45}})
request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={<r8=>0x0, 0x0, 0x4, 0x1f}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000440)={r8, 0x5c, "6fe88e40aa8588b7a19ac68589ec3a6b80231c8188a3f894a9b9eda79734ee9617c1b179fe169e6ce394d95786c0da8a0c2335e5a0571b36801960c1c767e8f1f1ae17731aec4acbe7315e1dcf8ddea8318dfc2879f2606f14f31c47"}, &(0x7f0000000540)=0x64)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/157)
r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCNOTTY(r9, 0x5422)

[ 1032.012570] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:03:16 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x3, 0x9, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\xe0\x00\x00 \x00\x00\x00\x00\x00\x00\x02\x00', 0x3ffffffc})
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x4, [@dev={0xac, 0x14, 0x14, 0x13}, @remote, @empty, @rand_addr]}, 0x20)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r4 = socket$inet(0x10, 0x3, 0x4)
sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="4c0000001200ff095ffefd956fa283b724a6006b00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)

[ 1032.056452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:16 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2a30c, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

[ 1032.128806] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:16 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='systgm.\x87osix_acdefault\x00\x00\x00', &(0x7f0000000c40), 0x24, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
socket$netlink(0x10, 0x3, 0x3)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KDGKBLED(0xffffffffffffffff, 0xc0046d00, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x86, @tick=0x80000001, 0xbc, {0x1, 0x2}, 0x8, 0x3, 0x81})
pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file1/file0\x00')

11:03:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$TCSETAF(r7, 0x5408, &(0x7f00000002c0)={0x8, 0x3, 0xa82, 0x800, 0x1a, "4cd5aa86fd56b3f0"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
fsetxattr(r10, &(0x7f0000000180)=@random={'user.', 'cpu.stat\x00'}, &(0x7f0000000240)='/dev/kvm\x00', 0x9, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r12, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

11:03:16 executing program 5:
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa800}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1000}}]}})

[ 1032.543833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1032.706962] overlayfs: filesystem on './file0' not supported as upperdir
11:03:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00l\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:17 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x400000)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r3)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000040)=' dev\a\x00', 0x0, 0x31fe43)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bind$x25(r7, &(0x7f0000000000)={0x9, @null='               \x00'}, 0x12)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0)

11:03:17 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xd27ef90a2610652a)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [], r2}, 0x18, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000000000)=0xc)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [], r4}, 0x18, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', r4, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000200)={0x800, 0x3})
lseek(r0, 0x0, 0x1)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x200)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
close(0xffffffffffffffff)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000007643560000000062100000000000000000", @ANYRES32, @ANYBLOB="0400d5a3b5350000"], 0x20}}, 0x0)

[ 1032.977678] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1033.019447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1033.056131] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1033.080621] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1033.116497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1033.240384] protocol 88fb is buggy, dev hsr_slave_1
[ 1033.560341] protocol 88fb is buggy, dev hsr_slave_0
[ 1033.565505] protocol 88fb is buggy, dev hsr_slave_1
[ 1033.800367] protocol 88fb is buggy, dev hsr_slave_0
[ 1033.805528] protocol 88fb is buggy, dev hsr_slave_1
[ 1034.269516] team0 (unregistering): Port device team_slave_0 removed
[ 1034.417625] team0 (unregistering): Port device team_slave_1 removed
[ 1035.187407] IPVS: ftp: loaded support on port[0] = 21
[ 1035.252226] chnl_net:caif_netlink_parms(): no params data found
[ 1035.279905] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1035.286497] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1035.293632] device bridge_slave_0 entered promiscuous mode
[ 1035.301888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1035.308281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.315613] device bridge_slave_1 entered promiscuous mode
[ 1035.333065] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1035.342479] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1035.360478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1035.367781] team0: Port device team_slave_0 added
[ 1035.373793] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1035.381542] team0: Port device team_slave_1 added
[ 1035.387082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1035.395624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1035.462321] device hsr_slave_0 entered promiscuous mode
[ 1035.500761] device hsr_slave_1 entered promiscuous mode
[ 1035.572548] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1035.580918] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1035.597411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1035.629889] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1035.638574] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1035.648367] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1035.655971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1035.663152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1035.675172] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1035.681374] 8021q: adding VLAN 0 to HW filter on device team0
[ 1035.689787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1035.696987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1035.704896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1035.712855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1035.719195] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1035.726651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1035.735949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1035.743234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1035.751471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1035.759029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1035.765434] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1035.775147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1035.782174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1035.793186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1035.800030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1035.812578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1035.821287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1035.829079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1035.838101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1035.850046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1035.857181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1035.866816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1035.874719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1035.882795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1035.890593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1035.901155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1035.907976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1035.915799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1035.925546] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1035.931825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1035.944811] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1035.952358] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1035.958572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1035.965691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1035.977532] 8021q: adding VLAN 0 to HW filter on device batadv0
11:03:20 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r2, r1)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r5 = dup2(r0, r4)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000200))
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='\x00 \x00\x00\x00\x00\x00\x00\x00\f\x88\x00', 0x0, 0x0)
dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r8 = signalfd4(r7, &(0x7f0000000040)={0x80}, 0x8, 0x800)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r12 = accept4$x25(r11, &(0x7f00000002c0), &(0x7f0000000300)=0x12, 0x800)
dup3(r8, r12, 0x0)
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r14 = dup(r13)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200000, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r15, 0x84, 0x6e, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x28002, 0x0)

11:03:20 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1, 0xffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x450, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf, 0x9, 0x4, 0xfffffffffffffff9}, 0xf)

11:03:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x02\xc0\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:20 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bridge\x00', 0x1000001e9)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r1)
r2 = socket(0x10, 0x2, 0xc)
write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x8)

11:03:20 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="7ef1f0a4701a403d35cb98b5ec8fd5700a98a63088199b713739af622bde073921de64aa136f70f489ad7a6b6f0d7d856d6909682647d91b8090df977963deb1be57adb9a37d0943d2cc841cea491b6342561671cd546c66ef86101e074eb4d371269e521f493561707c758a5ce58dfb890036dd1efff8e547f4443e32712736340e759478736e9f3704c7c792a5427ba840bc73be00e6bb0c09ac205ddb8e02dda69242216a87de10cce42e06390408d585ab684316ba083997426634a2e2f1129b4ad48dc04882832ba028393bf38f34202ecf", 0xd4}, {&(0x7f0000000440)="95bfafa15f683092202b565048eebb667f155b9899fba7e6412011219159bccf02b1c6d5de8b1e19dd6511ec8e24260f4772fc9ece129756edbf8f4c65ca27c5fb41e435327157c4d455e7b314f60da92f2132277365524a836ba2282978b3e5ce6df1ab351c0a0ee8913db5ebf3545d1ed06c403313843cc35a0207c2ce144a4cadc399bfb13f4ccd174e4c97d7700867deda22803b92eee286b5d0b06202a2f70b6c256a374b48f437ca0a2e696a456c9711fca43a6533bf0ccd308c067bbee7423c97e833ed408697b9329ce6c440809e", 0xd2}], 0x2, 0x8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000280)={0x424, 0x0, 0x4, 0x100000, 0x0, {0x77359400}, {0x2, 0x8, 0x3, 0x81, 0x81, 0xff, "d58a5070"}, 0x7, 0x4, @fd, 0x8, 0x0, <r4=>0xffffffffffffffff})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040))
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

11:03:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0xac00)
mkdirat(r0, 0x0, 0x0)
syz_open_dev$admmidi(0x0, 0x100000000, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000280)=0x3, 0xffffffffffffffff, 0x0, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @rand_addr="b3ffadac825170675d5e96e14627ed30", @mcast2, 0x0, 0x9, 0x8e, 0x400, 0x8, 0x100})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000140))
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)

[ 1036.166271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1036.192938] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1036.193530] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1036.233599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:20 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x9f0000, 0x2, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a6a, 0x6, [], @p_u8=&(0x7f0000000080)=0x4}})
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000001340), 0x4)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$inet6(0xa, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x801, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0))
listen(r2, 0x0)
syz_emit_ethernet(0x4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000907800044678255be9a18cabef27b5c9db4084652bf408320f92339ad7fdc42cc3178a160fdf224b594acaf95b9c17f640dbc0fbb7a8ba5ca76f49abb1139f52f4b916c30be011e0401062ea48679bc51525f527308586c7807df11b41b9cb47e8dc5b7a6861f2ff52a2a4481667550e7b12b4769059f69c141b2699048b28e83c968fefaf3d5251e50cf5cfb54c33da47cd100540276907a58bcd51"], 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000000), 0x43578cf5)
socket$tipc(0x1e, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r7, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001380)={0x0, 0x3, 0x4, 0x40, 0x81, 0x8, 0x1, 0x7, r7}, 0x20)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001300)={&(0x7f0000000300)=""/4096, 0x600000, 0xc00, 0x9, 0xd36c4ceabae71654}, 0x20)

11:03:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26b, &(0x7f0000000f80), 0x1fa}, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_misc(r2, &(0x7f00000002c0)={'syz0', "23728ec1e8dcfbfe8d1509d14570da9777a4ed63b276e0f24b283c5129e847b71580791d22f29c49e96e16f70bd1db0b3bad9bb823ed743d2ea83f750b4abaad65692736e9effeada012a4a8331c21c279a1cba8980a4296013c5a727b31986a68c885ad7c7e932c04c5bbd23f044fd10e6cfb678268c5bf58c291a32708676fecc15df703a181a1f698570bd6c152c3e968e0a6515df161a35846e7a32c0bc799534edceea31b107ea344bf7ef14557fabac51c8e3a7a1c0a1e3baa2eb8a7e8b32fb7e18ebcd60ca6bacee87fc8"}, 0xd2)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKIOMIN(r3, 0x1278, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f00000000c0))
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000))
r9 = fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(r9, 0x30, 0x0)
inotify_rm_watch(r7, 0x0)

11:03:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x06\xc0\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1036.711877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1036.774411] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1036.796826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x121101, 0x0)
r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x7f, 0x1, 0x4, 0x0, 0x40, {0x0, 0x2710}, {0x4, 0x2, 0x8, 0x3f, 0x1f, 0x20, "55b24cdd"}, 0x1, 0x1, @userptr=0x2, 0xb6d4, 0x0, r1})
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000), 0x0, 0x1a0}])
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0)
ioctl$RTC_WIE_ON(r2, 0x700f)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
connect$can_bcm(r6, &(0x7f0000000000), 0x10)
write$apparmor_exec(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x2c1)

11:03:21 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
membarrier(0x20, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1036.965910] nvme_fabrics: unknown parameter or missing value '\C(KC�[Y8d���<my�U3\C6im�B�1Ҿ�Ef ��v���ȗ�7��ٯ���T��w3ĕ܍3��/�U�gk�W[c��y��=�Q[�b�f4�l��8[' in ctrl creation request
11:03:21 executing program 0:
userfaultfd(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0)
lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$bpf(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x15, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x1ff}}], [{@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x61, 0x64, 0x64, 0x33, 0x36, 0x4e776eb4fdd2bd49, 0x33], 0x2d, [0x63, 0x0, 0x35, 0x32], 0x2d, [0x65, 0x38, 0x66, 0x39], 0x2d, [0xe2, 0x64, 0x38, 0x33], 0x2d, [0x34, 0x7d, 0x61, 0x61, 0x36, 0x0, 0x32, 0x35]}}}, {@obj_type={'obj_type', 0x3d, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}}, {@euid_gt={'euid>', r3}}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, 'batadv0\x00'}}, {@hash='hash'}]})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000002c0))
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r8, r4)
r9 = dup2(r2, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, &(0x7f0000000000)={'batadv0\x00', 0xffffffff00000001, 0x1})
sendfile(r1, r0, 0x0, 0x209)

[ 1037.099049] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1037.108436] SELinux: security_context_str_to_sid(root) failed for (dev bpf, type bpf) errno=-22
11:03:21 executing program 3:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x82000, 0x0)
fcntl$dupfd(r1, 0x0, r0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @dev}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)

[ 1037.177878] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:21 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpu.weight\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
dup3(r1, r2, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
select(0xf4, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x29)
ptrace$cont(0x18, r3, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x25, 0x0, 0x9})
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002102000000000100000000ebff01000100f83f0000000000edfffd000005"], 0x49}}, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)

11:03:21 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
setpgid(0x0, 0xffffffffffffffff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000000, 0xc, 0x4, 0x10, 0x8001, {0x0, 0x2710}, {0x0, 0xc, 0x0, 0x81, 0x7, 0x9, '{yk2'}, 0x7fff, 0x2, @userptr=0x7fff, 0xa0000000, 0x0, <r2=>r0})
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x8, 0x76, 0x0, 0x2, 0x9, 0x2, 0x0, 0x7ff, 0x568000, 0x1, 0x1, 0x538b, 0x800, 0x7fff, 0x0, 0xb, {0x4e6e8b15, 0x2}, 0x0, 0x4}})
fchdir(r1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000000c0))
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x13bb5c130fd84fdf, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00')
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)

11:03:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x27)
fcntl$setsig(r2, 0xa, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockname(r6, &(0x7f00000001c0)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x80)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18d19dc619817c79}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0x25}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)

11:03:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00\n\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1037.443906] audit: type=1400 audit(1577271801.803:8975): avc:  denied  { dyntransition } for  pid=31163 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=process permissive=1
11:03:21 executing program 3:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20400, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0), 0x0, 0x1)
close(r4)
splice(r3, 0x0, r4, 0x0, 0x10000, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000300)={0x2, [0x7, 0x9, 0x100], [{0xfffffffb, 0x3, 0x0, 0x1, 0x1}, {0x2, 0xffff, 0x1, 0x1}, {0x8001, 0x1, 0x1, 0x1, 0x1}, {0xa112694, 0x0, 0x1, 0x1}, {0x7f, 0xffffffff, 0x1, 0x1}, {0xfffffffb, 0x9, 0x1}, {0x8, 0xffffffff, 0x0, 0x1}, {0x9f5a, 0x40, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x1}], 0x400})
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=""/95, 0x5f, 0x100, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x24)
close(r2)
splice(r1, 0x0, r2, 0x0, 0x10000, 0x0)
setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @dev}}, 0x0, 0xffff}, &(0x7f0000000080)=0x90)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
fsetxattr(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="6f7378d329000002"], &(0x7f00000001c0)='eth0&$!vboxnet1(%.\x00', 0x13, 0x0)
ioctl$TCSETSW(r5, 0x5453, 0x0)

11:03:21 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x800002, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="f8"], 0x1)
fallocate(0xffffffffffffffff, 0x4, 0x443, 0x8020003)
writev(r2, 0x0, 0x0)
pipe(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000040)={0x1, 0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ')
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='nilfs2\x00', 0x20000, &(0x7f0000000200)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ')
fcntl$getown(r1, 0x9)
fcntl$setsig(r2, 0xa, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[ 1037.515249] audit: type=1400 audit(1577271801.833:8976): avc:  denied  { create } for  pid=31163 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=netlink_generic_socket permissive=1
[ 1037.548622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1037.575280] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1037.589497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa0100000}, [@IFLA_BROADCAST={0xc, 0x2, @random="f2cb0c70a3ff"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080))

11:03:22 executing program 3:
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000), 0x32a)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @mss={0x2, 0x91c}], 0x3)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618)
close(0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x32a)
connect$inet(r1, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0)
close(r1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r2, r2)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000f24be0f5779a1d9b0e00ffffffff", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

[ 1037.633968] audit: type=1400 audit(1577271801.833:8977): avc:  denied  { write } for  pid=31163 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=netlink_generic_socket permissive=1
[ 1037.720474] audit: type=1400 audit(1577271801.833:8978): avc:  denied  { read } for  pid=31163 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=netlink_generic_socket permissive=1
11:03:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x1, 0xf9, 0x401, 0x100, 0x8, 0x8000, 0x6, 0x7, 0x400, 0x0, 0xff, 0x1000000000, 0x39, 0x1, 0x3, 0x6], 0x2000, 0x80000})
r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x101, 'queue0\x00', 0x3})
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
recvfrom$inet(r10, &(0x7f0000000340)=""/252, 0xfc, 0x20000000, &(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r11 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r12 = dup2(r11, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$netrom_NETROM_T2(r12, 0x103, 0x2, &(0x7f0000000100)=0x8, &(0x7f0000000300)=0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000001200), 0x2}, 0x20)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

11:03:22 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000000)={0x40, 0x7, 0x3})

[ 1038.048888] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1038.134767] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00%\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1038.497899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1038.523645] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1038.534962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa0100000}, [@IFLA_BROADCAST={0xc, 0x2, @random="f2cb0c70a3ff"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080))

[ 1039.431561] device bridge_slave_1 left promiscuous mode
[ 1039.437115] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1039.491115] device bridge_slave_0 left promiscuous mode
[ 1039.496616] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.644521] device hsr_slave_1 left promiscuous mode
[ 1039.693897] device hsr_slave_0 left promiscuous mode
[ 1039.747763] team0 (unregistering): Port device team_slave_1 removed
[ 1039.758568] team0 (unregistering): Port device team_slave_0 removed
[ 1039.769083] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1039.806685] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1039.886076] bond0 (unregistering): Released all slaves
11:03:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x22, 0x829, 0x0, 0x0, {0xf, 0x1000000}, [@typed={0x8, 0x14, @str='\x00'}]}, 0x1c}, 0x1, 0xfdffffff00000000}, 0x0)

11:03:24 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80001, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
kcmp(r0, 0x0, 0x1, r1, r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@nat={'%at\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2f5)

11:03:24 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x1c00000, 0xdc3398901ead904f, 0x4, 0x40000, 0xfffffffa, {}, {0x1, 0xc, 0x6, 0x1f, 0x3, 0x0, "1bb8713d"}, 0x6, 0x2, @userptr=0xfffffffffffffffa, 0x4, 0x0, <r5=>r4})
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000380)={0x4e492, 0xfffffffd})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r6)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r10 = accept(r9, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r10, 0x8983, &(0x7f00000000c0)={0x1, 'bridge_slave_1\x00', {}, 0x10af})
r11 = socket(0x10, 0x2, 0xc)
write(r11, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0)

11:03:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00l\x00\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:24 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46a9c8002ed8e4c9e765ce27b903004620"], 0x14)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

[ 1040.376004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1040.379009] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:24 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
userfaultfd(0x800)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x400000, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x3, "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", 0xb9, 0x4, 0x0, 0x2, 0x100000000, 0x1}}}, 0x128)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
dup(0xffffffffffffffff)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
close(r4)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0})
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0x5, &(0x7f00000002c0)=0x1, 0x4)
futex(&(0x7f00000000c0)=0x1, 0x0, 0x0, &(0x7f0000000200)={r7, r8+30000000}, &(0x7f0000000240)=0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r12, 0x200004)
sendfile(r4, r12, 0x0, 0x80001d00c0d0)

[ 1040.470148] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1040.504373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:24 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x2, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00f\x00'/20, @ANYRES32=0x0, @ANYBLOB="04cad639fe00000000000000"], 0x28}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0x2a9)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x8f, 0x4)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e4220000000001339a4824ca945f6400", 0x2a}], 0x1)
bind(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x2, 0x3}}, 0xfffffd78)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00')
syz_open_dev$midi(0x0, 0x3, 0x1)
add_key(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200100, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r5, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6e26cab450786d95}, 0x200000000, 0x80000000000003, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x100}, 0x8)

[ 1040.519617] IPVS: ftp: loaded support on port[0] = 21
[ 1040.948583] audit: type=1800 audit(1577271805.303:8979): pid=31241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17066 res=0
[ 1041.209765] chnl_net:caif_netlink_parms(): no params data found
[ 1041.293090] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.299556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.307386] device bridge_slave_0 entered promiscuous mode
[ 1041.316504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.323380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.331234] device bridge_slave_1 entered promiscuous mode
[ 1041.356025] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1041.368464] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1041.397111] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1041.407121] team0: Port device team_slave_0 added
[ 1041.416123] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1041.425840] team0: Port device team_slave_1 added
[ 1041.435443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1041.445301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1041.524868] device hsr_slave_0 entered promiscuous mode
[ 1041.580777] device hsr_slave_1 entered promiscuous mode
[ 1041.621476] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1041.628873] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1041.648666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.655091] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1041.661778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.668136] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1041.716841] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1041.723742] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1041.733564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1041.743893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1041.751847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.758856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.767552] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1041.779925] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1041.787057] 8021q: adding VLAN 0 to HW filter on device team0
[ 1041.798742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1041.807286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.813717] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1041.831005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1041.838634] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.845032] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1041.861629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1041.869450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1041.877290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1041.894387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1041.904179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1041.915177] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1041.923315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1041.932365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1041.947487] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1041.960940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1041.978617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1041.986323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1041.998832] 8021q: adding VLAN 0 to HW filter on device batadv0
11:03:26 executing program 3:
r0 = socket$inet6(0xa, 0x800, 0x9)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x103)
recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
close(r0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

11:03:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$notify(r0, 0x402, 0x10)
dup(0xffffffffffffffff)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x1, &(0x7f0000000100)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

11:03:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000000c0)={0x7, 0x5, 0x33, 0x4}, 0x10)
socket(0x0, 0x803, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb498"], 0x5}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x2bb19afb0fa4f39f, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @dev}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x40}}, 0x0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x401, 0x0)
ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000240)=0xab)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b}, 0x20}}, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000240)=0x8, &(0x7f0000000280)=0x2)
exit(0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)

11:03:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00\xc0\x02\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:26 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r3 = socket(0x10, 0x0, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:26 executing program 0:
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff)
r2 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xbb)
setresuid(0x0, r3, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000140)=0x30f)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x20}], 0x1, 0x0)
r11 = getpgrp(0x0)
r12 = getpid()
sched_setattr(r12, &(0x7f0000000440)={0x38, 0x5, 0x0, 0x40, 0x3, 0x4, 0x0, 0x3}, 0x0)
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x0, r3, r4, r8, r10, 0x98, 0xe9b}, 0x20, 0x200, 0x1, 0x2, r11, r12, 0x1})
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = fcntl$dupfd(r13, 0x0, r13)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r15=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_sl\tve\x00'}, {0xc, 0x5, [@IFLA_BRPORT_COST={0x8}]}}}]}, 0x44}}, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0)
pipe(0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}])

[ 1042.151991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1042.167663] audit: type=1800 audit(1577271806.513:8980): pid=31254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0
[ 1042.177823] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1042.227397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800020068000000"], 0x3c}}, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000000)={0x7fff, 0x7, 0x4, 0x60e014, 0x58, {0x77359400}, {0x1, 0x0, 0x2, 0x1, 0x5d, 0x1, "d1bb1ef2"}, 0x400, 0x3, @offset=0x7, 0x7fff, 0x0, <r4=>r0})
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4)

11:03:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00\xc0\x06\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:26 executing program 3:
socket$inet(0x10, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x52401, 0x0)
accept4$inet6(r0, 0x0, &(0x7f0000000280), 0x100400)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
write$P9_RREAD(r3, &(0x7f00000003c0)={0xb}, 0xb)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', 0x0, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x7, 0x509100)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0)
fcntl$getflags(r4, 0x40a)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r11 = syz_open_pts(r10, 0x0)
ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f0000000380))
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)=0x5, 0x181)

11:03:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xffffffffffffffc2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/75)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000180))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:03:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1104, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0)
r1 = open(0x0, 0x0, 0x0)
renameat(r1, 0x0, r1, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00')
setpgid(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)
getrandom(0x0, 0x0, 0x0)

11:03:27 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

11:03:27 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="001de9d2b8df6663a8b434b3000008"], 0x18}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x4000, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x1000000, 0x80, {}, {0x3, 0x0, 0x7, 0x20, 0x5b, 0x1, "c126ab2e"}, 0x36e, 0x4, @fd, 0x8f3, 0x0, <r6=>0xffffffffffffffff})
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
dup2(r8, r6)
dup2(r2, r1)

11:03:27 executing program 0:
creat(0x0, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000240)={{0x2, 0x4e22, @multicast1}, {0x6, @local}, 0x20, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000100), 0x4)
ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000a00)=""/4096)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r6, 0xfc4318e113e49cb9, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010225bd7000fcdbdf2502000000800004001400010062726f6164636173742d6c696e6b00004c000700080002000200000008000400ff01000008000400070000000800010018000000080002000300000008000300ffffffff0800030002000000080001000500000008000400050000001c00070008000300078d0000080003008100000008000300810000004c0005001c000100a8ac6e148c97b62ceb8ee422e7758c35d4a5f59d52e4a500240002000800040000000000080002007f0000000800020009000000080001000700000008000100657468004400070008000200800000000c000400010000000000000008000100080000000c00030000000000000000000c000400f8ffffffffffffff0c0003000104000000000000"], 0x124}, 0x1, 0x0, 0x0, 0x4c0}, 0x3320aeec60727a2c)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_NMI(r9, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r11 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r12 = dup2(r11, r10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x8)
r13 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r13, 0x4, 0x6100)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x1012, r14, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x7ad76f1af34fcbca, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r15 = socket$inet(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r15, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'gre0\x00'}, 0x18)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
r16 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r16, 0x0)
write$P9_RWALK(r16, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)

[ 1043.139832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
11:03:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x6, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f00000001c0)="9b247f9c1793", 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6)
read(r0, &(0x7f0000000380)=""/42, 0xf0)
syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7210e8ff7f153a"])
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000180)=[0x80000000, 0x5])
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x43020401}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x37, 0x18, {0x96aa, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xed34d85d29f198ac}, 0x80)

11:03:27 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
close(r2)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x6)
r5 = memfd_create(&(0x7f00000000c0)='em0ppp1%)lo$}\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000040)={r7, 0xfffffff8})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa)

11:03:27 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3e7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4(r1, 0x0, &(0x7f0000000140), 0x800)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f0000000200)=0x1e)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r4 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002)
dup3(r4, r3, 0x0)
write$P9_RATTACH(r3, &(0x7f00000001c0)={0x14}, 0xffffffde)
gettid()
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r6, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000100)={r6, 0x9}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r6, 0x1, 0x30}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r9, 0xc0045520, &(0x7f0000000280)=0xffffffe1)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10000, 0x0)

[ 1043.183459] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1043.190469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1043.271263] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0
[ 1043.297522] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x02\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1043.396839] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:27 executing program 5:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2}, 0xd8)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = dup2(r3, r6)
ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6}, 0x4, {0x2, 0x4e23, @local}, 'ip6erspan0\x00'})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11:03:28 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x7}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

11:03:28 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r3 = accept4$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c, 0x80000)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000380)={0x8000, {{0xa, 0x4e22, 0x7, @mcast1, 0x6}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x23}, 0x6}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00\xf1e\x16\xfa<~\x02*\xf2]V0\xdal\xd286\xbe7\x86@\xfa\x02\xf6\xed\x18NB\xb8\x9a\x83\x9ee\xd6B\x82\xc2(C\xad\t&K\x89\xc2\xdb\xfb\x9d\xb05\xe4\xe0\x84\xcc\xfc\x82\x92\xde\xcd\xaa[\xd2\xc4L\xdf<}\x06\x12\xecE\x1c\xa61\xaa\x01)\xd2Il)\x91/S2\xc2\xccT\x90\v\x02\x8b\xac| 9\f\x9af\x8e]\xffX\xd3z>\xd1\xb4g\xf5\x0eC\x86\x12\xf7#\xb3\xe8\r\xacB\x9a\xbf\xe09\x9c\"\n\xc8k\x06\x89\xd4\x9b/IG=\x14%\xaa\xde\xba*\x92YVf\xd8j+\x9e', 0x0, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\b\x00i', @ANYRES16=r5, @ANYBLOB="040028bd7000fddbdf250300000008000100000000000c00020008000000000000000c0004008000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22048002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x88, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x6000081)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff7fffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7a2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4804}, 0x20008004)

11:03:28 executing program 2:
open(0x0, 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21367ebf60b5fff01ce646ba1a34578d3abdf1e155667a609816625c4"], 0x1}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x48, 0x0, 0x401, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3f], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

[ 1044.061990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1044.131967] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1044.138349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:28 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1044.302827] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1044.408487] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1044.801848] device bridge_slave_1 left promiscuous mode
[ 1044.807402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.871472] device bridge_slave_0 left promiscuous mode
[ 1044.878275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1045.033384] device hsr_slave_1 left promiscuous mode
[ 1045.073197] device hsr_slave_0 left promiscuous mode
[ 1045.116090] team0 (unregistering): Port device team_slave_1 removed
[ 1045.150449] team0 (unregistering): Port device team_slave_0 removed
[ 1045.163598] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1045.226851] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1045.301995] bond0 (unregistering): Released all slaves
[ 1046.046419] IPVS: ftp: loaded support on port[0] = 21
[ 1046.154426] chnl_net:caif_netlink_parms(): no params data found
[ 1046.198246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.204819] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.212328] device bridge_slave_0 entered promiscuous mode
[ 1046.220049] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.226547] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.233671] device bridge_slave_1 entered promiscuous mode
[ 1046.254052] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1046.264097] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1046.282457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1046.289720] team0: Port device team_slave_0 added
[ 1046.295542] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1046.303173] team0: Port device team_slave_1 added
[ 1046.308623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1046.316807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1046.383428] device hsr_slave_0 entered promiscuous mode
[ 1046.420782] device hsr_slave_1 entered promiscuous mode
[ 1046.475891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1046.483387] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1046.506856] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1046.556680] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1046.567164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1046.575886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1046.582767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1046.589705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1046.599592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1046.607075] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.615536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1046.622604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1046.633549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1046.641229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.647555] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1046.657862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1046.665196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1046.673047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1046.681230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1046.688880] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.695400] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1046.705243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1046.712328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1046.723572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1046.732251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1046.742522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1046.749435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1046.758406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1046.766914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1046.778322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1046.786314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1046.794343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1046.805210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1046.812209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1046.819732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1046.829532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1046.836539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1046.844408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1046.854828] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1046.861373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1046.876626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1046.884609] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1046.890958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1046.897695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1046.908203] 8021q: adding VLAN 0 to HW filter on device batadv0
11:03:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00\x88\x8b\xe7\xbe\xc7\bD\xe5!\xc1\xaf\x05\xaaz6\xd7w \x00\x00\x00Q*\xe7ap\xfc\xfe\xf9-St\xaa\t\x8a\xb3\x04\a\vMZ\xfd\xf6\x1c\xd0j\x01S\xf4r\xd7\xeed\v\x82\xb7\x7f\xf5\x13+\xbb\xae\x1dp7-\x10\xc5\xad\x11\xb1\x88E\xae9}\xfa.\xae\xa6E')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000bdc3dff25bcba9092d3002000000001000000cc0fa1552a4ab86670f57386c733a01de1f700030000001400000000000100060000008648da7d5a0cd5c1adf21763460c9e8f820a552b9b09be5999b036651e2a8e3782512e4d5dd4c58c433a005373b7f74f1aad997d8717a2d4f4a0c8c1ccddedea9452690b340715ae8c5b0870576c9b58de519a1b70ff5849443b5e98c0dc4164445db2c443e02dd080c5af466f42160abc4a4aeb9dc4b9bc2facbc98af21682f307e0b00c0f4a380a0e2c71f66f22a65aa674a4b7e1bef112a946c4d1d61e926f85721f55763d9b38d598c724361a460de57e32bc14c901937d645af38cf634b53ffe386b6218df4de21"])
r4 = memfd_create(&(0x7f0000000180)='n\xf5\x00\x00\x83dev\x05\x00', 0xb140f19f221717a2)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x5})
r8 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xbc000b14)
inotify_rm_watch(0xffffffffffffffff, r8)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000040)={0x9a0000, 0x9, 0x13, <r11=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x35c8b856beb6da47, 0x2, [], @ptr=0x8}})
ioctl$KVM_ENABLE_CAP_CPU(r11, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0xa4cd, 0x101, 0x7fffffff, 0x8]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x929c)
r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r14 = dup2(r13, r12)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDRV_PCM_IOCTL_LINK(r14, 0x40044160, &(0x7f00000001c0)=0xb56dc56f)
r15 = add_key$keyring(0x0, &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, 0x0, 0x0, r15)
add_key(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r15)
keyctl$KEYCTL_PKEY_QUERY(0x18, r15, 0x0, &(0x7f00000002c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', &(0x7f0000000300))
r16 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r17 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r18 = dup2(r17, r16)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r18, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_CHECK_EXTENSION(r18, 0xae03, 0x3)

11:03:31 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x1)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = socket(0x10, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x20002007})
getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000300)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'ip6gre0\x00', {0x1}, 0x7})
socket$netlink(0x10, 0x3, 0x9)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b3ba34f7c4d51011737ae001855f86c6"], 0x2}}, 0x0)

11:03:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x03\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000080)={0x2000000000000000, 0xd000, 0x1c, 0x0, 0x18})
r8 = socket$netlink(0x10, 0x3, 0x4)
write(r8, &(0x7f0000000000), 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
write(r9, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26)
write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
dup2(r9, 0xffffffffffffffff)

11:03:31 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r6, r9})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:31 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000040)=0x400)
write(r1, &(0x7f00000001c0)='(', 0x20000339)

[ 1047.020783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1047.056137] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:31 executing program 0:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000500))
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000800)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e30, @loopback}, 0x162a84fa7f5f5988, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x80, 0xff, 0x80})
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000280)={0x2, 'vxcan1\x00', {0x3}, 0x20})
gettid()
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
r4 = dup(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)={0x0, 0x2c1, 0x800, 0x20, 0xff})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xed00, 0x0)
r6 = socket(0x22, 0x2, 0x4)
fsetxattr$security_smack_transmute(r3, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000004c0)='TRUE', 0x4, 0x3)
ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000000040))
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="1956367429f7a04fb45b69a56bd636d08c51c54f6a4c02ed0967d8b7d4dfdc4dc53fae7ae96b5894a4b9058fcd1f95d81153a187bd1aa418e8fafc75039719607843478a8ae85ec07763e21ccc7e627acb7ae0bf8f2930327cf6d7a96ca17ddbc9b557baf88aab3bb45adc18f5d3ab09eb584971385895419185f4e893a79cbb9bcf73071221120be85395d327aea3d7c51fda3b65016fc6ed1db62d88719d", @ANYRES16=0x0, @ANYBLOB="00002bbd700000000000110000000400030008000400090000000c00010008000800ff01000008000600018000002400010008000200320000000800020000000000080001000a0000000800050002000000080005000e000000"], 0x60}}, 0x4872df1af972a635)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="636c71a012c0a63de1c7a4bcd7130b7cb948e0d0ffd0db5d973dfc48e7a0b4a8b050b108f24865824db45c44c2e1779b8d00bccd", @ANYRES16=0x0, @ANYBLOB="010000000000ffdbdf25010000002c000200080007000000000008000b0002000000080002004e220000080004000300000008000900ffffffff180002001400010000000000000000000000ffffffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
socketpair(0x0, 0x0, 0x0, 0x0)

[ 1047.080584] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.085708] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.088986] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1047.098974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1047.149441] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1047.160586] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.165749] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.200361] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.205475] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.210681] protocol 88fb is buggy, dev hsr_slave_1
[ 1047.228004] overlayfs: conflicting lowerdir path
[ 1047.320436] protocol 88fb is buggy, dev hsr_slave_0
[ 1047.325690] protocol 88fb is buggy, dev hsr_slave_1
11:03:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x04\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:31 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x94, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000200)=""/148}, &(0x7f00000004c0)=0x78)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r7, r6)
setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100e18fee581fd1f18f00100097070000000000000000ffffffff0000000000000000000000000000000000000000000000fb00000000000000000000e750c80000", @ANYRES32=r5, @ANYRESOCT=r6, @ANYBLOB="02ed4d73062b85e8a45dfa2e6a3478050000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200020000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080185ac0000000000000"], 0x4}, 0x1, 0x0, 0x0, 0x11}, 0x0)

11:03:31 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x7e)
ioctl(r1, 0x9, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000200039f5f72198ad09e600000000000080000000000000"], 0x14}, 0x1, 0xffffff7f0e000000}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x43c9ff520dbfaae, 0x0)

[ 1047.474710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1047.487307] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1047.504949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:31 executing program 3:
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
r4 = getpgrp(0x0)
capget(&(0x7f00000002c0)={0x99b8b23, r4}, 0x0)
getpgid(0x0)
r5 = memfd_create(0x0, 0x5)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x1)
r7 = dup2(r6, r5)
ppoll(&(0x7f0000000200)=[{r7}], 0x1, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x5452, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580))
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r12, r11)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r12, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r13 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r14 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r15 = dup2(r14, r13)
r16 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r17 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r17, r16)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r17, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r18 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r19 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r20 = dup2(r19, r18)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r20, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r21 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r22 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r22, r21)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r22, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
write$binfmt_misc(r10, &(0x7f00000004c0)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYRES16=r13, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRESDEC=r17, @ANYRES32=r1, @ANYBLOB="8ebc42772fafbaeaff05e1e2c8d72dfb4d1d2e9e012c6e13617aa6457656290de27cd322dfe556a0f128e9c48a5fb3e41ffebebf9eab59b31d02ce6a1cba95b890d19eac554c23268f9ebbd2b05951a3527c27d0316ed6ad0dd192927882bdf8ba99b0faf9bda6682ca5a1fe7189c4f7aa14142b23b1f082", @ANYPTR64, @ANYPTR], @ANYPTR, @ANYRES16=r20, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYBLOB="43672e9472964995231bd485d222dac6726ca57eaf39"], @ANYRES16=r22, @ANYRES16=r15, @ANYRES64=0x0], @ANYRES64], 0x1a)
r23 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r23, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
write$binfmt_script(r23, 0x0, 0x0)
connect$inet(r23, 0x0, 0x0)
close(0xffffffffffffffff)
fsetxattr$system_posix_acl(r9, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[], 0x0, 0x1)
r24 = socket(0xa, 0x3, 0x8)
r25 = syz_open_dev$amidi(0x0, 0x9c4, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r24, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r25, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
sendmsg$key(r24, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
gettid()
r26 = getpid()
sched_setscheduler(r26, 0x5, &(0x7f0000000380))
sendmsg$key(r24, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c00000000006140dd13bf32ab1a0000"]}}, 0x20004850)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27)
r27 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r27)
r28 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
writev(r28, &(0x7f0000000000)=[{&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x24}], 0x1)
getpgid(r4)
ptrace$setopts(0x4206, r27, 0x0, 0x0)
r29 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r30=>r27, r29, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00'}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={r30, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)='syz1\x00'}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30)
open(0x0, 0xe279a88a3b20cda9, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xa1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x807}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r31 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$setpipe(r31, 0x407, 0xfffffffffffffffe)
bind$inet(r31, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r31, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r32 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r33 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r34 = dup2(r33, r32)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r34, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$SO_BINDTODEVICE(r34, 0x1, 0x19, &(0x7f0000000200)='sBt0\x00\x00\x00\x00\xe1\xff\xff\x14\x00', 0xff28)
r35 = syz_open_dev$loop(&(0x7f0000000440)='/dev/loop#\x00', 0x5, 0x105084)
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r36 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_IOCTL(r36, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2)
r37 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r37, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x0, 0x81003)
ioctl$LOOP_CHANGE_FD(r35, 0x4c00, r37)
sendfile(r31, r35, 0x0, 0x102000004)

[ 1047.621953] protocol 88fb is buggy, dev hsr_slave_1
11:03:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = socket(0x4, 0xc, 0x4)
fcntl$getflags(r8, 0x408)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
clock_gettime(0x0, &(0x7f00000002c0)={<r9=>0x0, <r10=>0x0})
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)={0x8, 0x7, 0x4, 0x4000, 0x7, {r9, r10/1000+30000}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x5, "14642964"}, 0x2, 0x4, @userptr=0x7, 0xffffffa8, 0x0, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r12, 0x5fed82d68411b6e4, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x37}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x48be, 0x4e]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4046800)
setsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000380)={0x3f, 0x3, 0x6, 0x7f, 0x7f, 0x3f, 0x0, 0x6, 0x1, 0x0, 0x2, 0x20, 0x5, 0x8}, 0xe)
r13 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="66b9800000c00f326635000100000f30f30fbd680066b9eb0800000f322e0f20503664262e2e0f01c40f01c83e0f0174fd67670f017f742e260f79490d66b9090200000f32", 0x45}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x88, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x5, @local, 0x3f}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x93, @empty, 0x1}, @in={0x2, 0x4e24, @remote}]}, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

11:03:32 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x1, 0x2, 0x8)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8000, 0x9}]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r11 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4000)
r12 = dup2(r11, r10)
r13 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r14 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r15 = dup2(r14, r13)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r15, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffe})
setsockopt(r15, 0x7fff, 0xb7, &(0x7f00000002c0)="f18d3d96098d738b2877e473c25daf06a874720d67fd3c2a0e80f748037050a48524e82f5bc594f625779da37d257339f422862d414d1fbf116ed8720b8f702a48909439e5c9f39ba41c6995464be7eec81e4b0bd01d7993150e41d827070b0b1a60fd6954c50254ed1efc5c061890e6855410576b73dd542fcdeee9809a316d38ceb59194a42ada8e03a15f69eadc1dd8adb3a2d4c9844cfa3aca53e490421ad2d0c92bd9ec14906b5af904a95e7730a1bb77ea98e006136f69e011f0dddab15b3a22e3eb568e", 0xc7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r16 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r17 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r18 = dup2(r17, r16)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r18, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r18, 0x800443d2, &(0x7f00000000c0))

[ 1048.068560] audit: type=1326 audit(1577271812.423:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=31401 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0x0
11:03:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x05\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1048.237718] bridge0: port 3(gretap0) entered blocking state
[ 1048.251166] bridge0: port 3(gretap0) entered disabled state
[ 1048.310615] device gretap0 entered promiscuous mode
[ 1048.324169] bridge0: port 3(gretap0) entered blocking state
[ 1048.329992] bridge0: port 3(gretap0) entered forwarding state
[ 1048.344673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
11:03:32 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xffBiB\x1cN\nk:^\xd9\x989\x9d;\xd9t\xc9S\xa7\xc3I:\x19:a\xa0\x1b}\xa3\xcf\xddM\xf5\x0f\xae\x8c\xe2\xf7\x8c~u\xc0\x16\xad\xa8\xfd6\x16M\xe3\xe6\xcd\x9b\xf4\xea\x98<f\x1e\xa9x\xd7\x1f{\xe7l\x96\x91\x89\xd8EF=\xc6', 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000005}, 0x4000000)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1ff)
socket(0x100000000011, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="0005040000", @ANYRES32=r6, @ANYBLOB="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"], 0x25c}}, 0x0)
dup(r2)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10}, 0x18)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)
syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xff, 0x80)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r8, &(0x7f0000000500)=""/231, 0x3a2)
ioctl$TIOCMBIS(r8, 0x5416, &(0x7f0000000240)=0xfff)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8b28a333b123f86a}, 0x10)
creat(&(0x7f0000000280)='./file0\x00', 0x1)
sendfile(r0, r0, 0x0, 0x1000100040fe3)

[ 1048.355324] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1048.362959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1048.546757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5632 sclass=netlink_route_socket pig=31420 comm=syz-executor.0
[ 1048.615473] audit: type=1804 audit(1577271812.973:8982): pid=31420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/67/file0" dev="sda1" ino=16769 res=1
[ 1048.687191] audit: type=1804 audit(1577271813.003:8983): pid=31427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/67/file0" dev="sda1" ino=16769 res=1
11:03:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x06\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:33 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
socket(0x10, 0x2, 0xc)
r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x800)
write(r3, &(0x7f0000000180)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0xfffffffffffffe62)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00=\xe3\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x4)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = accept4(r6, 0x0, &(0x7f0000000040), 0x80800)
write(r7, &(0x7f0000000000)="1f0021b748d2ce3da109465c54c00711000300000000001000", 0xfe8b)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:33 executing program 2:
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r1 = syz_open_procfs(0x0, 0xffffffffffffffff)
fstat(r1, &(0x7f0000000000))
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b)
fdatasync(r3)
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
r5 = syz_open_procfs(0x0, 0xffffffffffffffff)
fstat(r5, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200100, 0x0)
write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x369, 0x0, 0x1ff, 0x0, <r6=>0x0}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={r6, 0x9}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r7 = openat(0xffffffffffffffff, 0x0, 0x200001, 0x40)
ioctl$VIDIOC_S_FBUF(r7, 0x4030560b, 0x0)
r8 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x28100)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in={0x2, 0x4e20, @empty}], 0x3c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), 0x20)
clock_getres(0x5, &(0x7f0000000080))
io_setup(0x1ff, &(0x7f00000003c0)=<r9=>0x0)
fcntl$setstatus(r4, 0x4, 0x44800)
io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="1a583b612e76775e8deba1fe14e5a4b1036b17b6f240048038202aee65a0dc06e18a746ca7c54d9cf82b7c86c601a1f214a19624e538658c38c7a59992f9369bafd88b8d5b18ab", 0xfffffffffffffe9c}])
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0xfff0, r2, 0x0, 0x4, 0x1, 0x3})

[ 1048.829505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5632 sclass=netlink_route_socket pig=31420 comm=syz-executor.0
[ 1048.902477] audit: type=1804 audit(1577271813.263:8984): pid=31436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/67/file0" dev="sda1" ino=16769 res=1
11:03:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
open(0x0, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0)
r3 = socket(0x10, 0x2, 0x0)
r4 = dup(r3)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r6 = dup2(r5, r5)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r6, 0x0)
r7 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x10001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0xa4, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x6, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/192, 0xc0, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}, @free_buffer={0x40086303, r7}, @clear_death, @reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fd, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/49, 0x31, 0x0, 0x6}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0xf00, 0x0, &(0x7f0000000700)="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"})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x800c6613, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='/\x02roup.stap\x00', 0x2761, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000080)={0x7, 0x8001, 0x3, 0x6})
write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625df083002000000408478c2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f61eeaa8b6639ce7f16a3785445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776ff894e3472e2b8811e658a49a0eba9b9d6a05995f5ed199fcf8722be75fa42c080601d48e799be8c0"], 0xa0)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

[ 1049.046424] audit: type=1804 audit(1577271813.263:8985): pid=31435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/67/file0" dev="sda1" ino=16769 res=1
[ 1049.431727] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 1049.440172] FAT-fs (loop0): Filesystem has been set read-only
[ 1049.447517] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17)
11:03:33 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x97, 0x4, 0x400}, 0x3c)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$RTC_UIE_OFF(r2, 0x7004)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000140), 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
recvfrom$unix(r3, 0x0, 0x7ffffffff000, 0x20001142, 0x0, 0x0)

[ 1049.500045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17398 sclass=netlink_route_socket pig=31447 comm=syz-executor.0
11:03:33 executing program 2:
sysinfo(&(0x7f0000000000)=""/22)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x0, 0x300)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080001"], 0x3}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000140)={0x0, 0x0, 0x3})
r6 = socket$kcm(0x29, 0x2, 0x0)
dup2(r6, 0xffffffffffffffff)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x103c0, 0x0)
fsetxattr$trusted_overlay_upper(r7, &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
socket$inet(0x10, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[ 1050.925912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1050.936526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1050.943038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:35 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="207e18110a0aba309c22d94bdf608e995b558776fd6d0da1b57486d470197d4a9365ebcf152d692520790a757efa895747550917642e033dbdb8c5e8bc0000000095544b03cf4223c531290f7e49c1701714fe4ada0dd786ea5c7091dd6417992bfab40ced3af204a360bae8196eaf5a2842b2c500f298d1ce4b73710b74d2bc69fb5b4018f0a29cad6e00d9ec7d84931e5562b32180d67600f7cff50b02f180fb21b06733f04d72ea02fc453ed2459db6f94b16b28c27187b5efe0000000000", 0xc0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0xfefc, @ipv4={[], [], @local}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)

11:03:35 executing program 0:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x460480, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={<r4=>0x0})
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000340)={r4})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000640)={r4, 0xacc2b7ad064b4219})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={<r5=>0x0, 0x9}, &(0x7f0000000440)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r5}, 0x8)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00')
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
accept4$unix(r6, &(0x7f0000001500), &(0x7f0000000000)=0x6e, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}, 0x4, 0xffff, 0x0, 0x1905, 0x0, 0x9, 0x6b}, &(0x7f00000002c0)=0x9c)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.selinux\x00', &(0x7f0000000540)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x2e, 0x3)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x180000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000005c0)={0x8, 0x5, 0x2, 0x7, 0x10001})
io_setup(0x4, &(0x7f0000000600))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r8 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

11:03:35 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000380))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r4 = accept(r3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80)
getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video37\x00', 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
io_setup(0x7fff, &(0x7f0000000200))
r5 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000002c0)=r5)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = getpid()
sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x2, 0x81, 0x2, 0xc, 0x0, 0x6cd, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x1800, 0x5, 0x5, 0x0, 0x0, 0x8, 0x7}, r8, 0x8, r1, 0xa)
r9 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000240))
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:35 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x107, &(0x7f00000001c0)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0xcd, 0x0, 0x10, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x700, 0x2a8, "6cfaa0beab8357789f6ba1ba3895f7e529d999122cf2cef7b2f213ed8e85e08f3fb6c9f03cb807484b415342d5ec312c507301f0e993521616de1f8197d1c677a16b4849eb47e44470eeb7b48442f44e71a45b8e663513636eddeb50f1fbd0e8c379dd658b9daeaff8d9e83061cda22b5af7880be1567027e1e667f99c79e6680ae884cf414403c12f1a077b9eb712d5d08a0786f625dbaa5f467b526bbd06797ef783ced8f3cf691db5f0980e9e8a2f514dc6c90626b724ea84c0c11e05dbea3c7c0ac072"}}}}}}, 0x0)

11:03:35 executing program 2:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

11:03:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\a\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1051.173108] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x4, 0x0, @u32=0x4}]}]}, 0x24}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000036c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/129, 0x81}, {&(0x7f00000021c0)=""/81, 0x51}, {&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/154, 0x9a}, {&(0x7f0000002400)=""/252, 0xfc}, {&(0x7f0000002500)=""/232, 0xe8}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/184, 0xb8}], 0xa, 0x5)

[ 1051.206810] audit: type=1400 audit(1577271815.563:8986): avc:  denied  { accept } for  pid=31469 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
11:03:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x3, 0x2, 0x2, 0xff000000000000})
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xffffffffffffff17)

[ 1051.318848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1051.387745] Unknown ioctl 1075883590
[ 1051.396273] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1051.409767] Unknown ioctl 1075883590
[ 1051.424524] Unknown ioctl 1075883590
[ 1051.428601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1051.438273] Unknown ioctl 1075883590
[ 1051.444377] Unknown ioctl 1075883590
[ 1051.449182] Unknown ioctl 1075883590
[ 1051.458048] bridge0: port 3(gretap0) entered disabled state
[ 1051.462639] Unknown ioctl 1075883590
[ 1051.467746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1051.473002] Unknown ioctl 1075883590
[ 1051.480428] bridge0: port 1(bridge_slave_0) entered disabled state
11:03:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\b\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1051.487311] Unknown ioctl 1075883590
[ 1051.495431] Unknown ioctl 1075883590
[ 1051.503954] Unknown ioctl 1075883590
[ 1051.533746] Unknown ioctl 1075883590
[ 1051.556064] Unknown ioctl 1075883590
[ 1051.580399] Unknown ioctl 1075883590
[ 1051.584379] Unknown ioctl 1075883590
[ 1051.588317] Unknown ioctl 1075883590
[ 1051.597386] Unknown ioctl 1075883590
[ 1051.604379] Unknown ioctl 1075883590
[ 1051.609618] Unknown ioctl 1075883590
[ 1051.618317] Unknown ioctl 1075883590
[ 1051.623123] Unknown ioctl 1075883590
[ 1051.627083] Unknown ioctl 1075883590
[ 1051.635707] Unknown ioctl 1075883590
[ 1051.639705] Unknown ioctl 1075883590
[ 1051.645766] Unknown ioctl 1075883590
[ 1051.688508] Unknown ioctl 1075883590
11:03:36 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(0x0, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x40)
fallocate(r0, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086607, &(0x7f0000000040)={0xd000000, r1})

11:03:36 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4000000020000000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket$inet6(0xa, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_TSC(0x1a, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_::utempter_exec_t:s0\x00', 0x25, 0x0)
syslog(0x1, 0x0, 0x0)
gettid()
socket$inet6(0xa, 0x40000080806, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x40000)
sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2)
r5 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)={"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"})

11:03:36 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000180)={0x6, 'lapb0\x00', {0x7}, 0x8})
ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000000000)=""/121)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1052.144788] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1052.160486] SELinux:  Context system_u:object_::utempter_exec_t:s0 is not valid (left unmapped).
[ 1052.209335] audit: type=1400 audit(1577271816.563:8987): avc:  denied  { relabelto } for  pid=31509 comm="syz-executor.3" name="DCCPv6" dev="sockfs" ino=144699 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dccp_socket permissive=1
[ 1052.305482] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/112, 0x70}], 0x1, &(0x7f0000000540)=""/154, 0x9a}, 0x7ff}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/131, 0x83}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/64, 0x40}], 0x3, &(0x7f00000008c0)=""/39, 0x27}, 0x4}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000900)=""/74, 0x4a}], 0x1, &(0x7f00000009c0)=""/203, 0xcb}, 0x1}, {{&(0x7f0000000ac0)=@caif=@util, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/93, 0x5d}, {&(0x7f0000000bc0)=""/135, 0x87}], 0x2, &(0x7f0000000cc0)=""/251, 0xfb}, 0x6}], 0x4, 0x40000000, 0x0)
getsockname$packet(r4, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000010c0)={0x5000, 0x0, 0x1, r3})
r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r14 = dup2(r13, r12)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r15 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r14, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x48, r15, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2040040}, 0x1)
r16 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r17 = dup2(r16, r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r17, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r18 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r19 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r20 = dup2(r19, r18)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r20, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000f40)={<r21=>0x0, 0x4}, &(0x7f0000000f80)=0x8)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
write(r22, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r23=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r23, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r22, 0x84, 0x66, &(0x7f0000000100)={r23, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r20, 0x84, 0xe, &(0x7f0000000fc0)={r21, 0xb8, 0x9, 0x5, 0x5, 0xff81, 0x0, 0x7, {r23, @in6={{0xa, 0x4e21, 0xffffff36, @local}}, 0x2, 0x2, 0x7, 0x20, 0x1}}, &(0x7f0000001080)=0xb0)
ioctl$SG_GET_LOW_DMA(r17, 0x227a, &(0x7f0000000140))
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3, 0x4})
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/51, 0x33)

11:03:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={[{@gid={'gid'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ppp1vc:,selfwlan0'}}, {@smackfshat={'smackfshat', 0x3d, 'cgroup{em0%)'}}]})
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x7, 0xfffffffc, 0x2, 0x7, 0x1})
socket$unix(0x1, 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./file1\x00', 0x8)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x3, 0x2, 0x81, 0x9, 0x0, 0x1, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x8}, 0x10, 0x1f, 0x6, 0x0, 0x40, 0x6, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
recvfrom$unix(r1, &(0x7f00000000c0)=""/57, 0x39, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

11:03:37 executing program 3:
syz_read_part_table(0x4000000005245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254b1df1321a3", 0x4d, 0x1c0}])
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0x4, 0x9, 0x4, 0x40000, 0x6, {r4, r5/1000+30000}, {0x5, 0x2, 0x8, 0x3, 0x20, 0x9, "1d16c685"}, 0x1, 0x35d5770474d96ac5, @fd=r8, 0x401, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{}, {<r10=>0x0}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={r10, 0x0})
r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400500, 0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r11, 0xc0385650, &(0x7f0000000380)={{0x1, @addr=0x7c10}, 0x8, 0xfff, 0x3})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000340)={r10, 0x3, &(0x7f0000000200)=[0x0, 0x3f, 0x80000001], 0x0, 0x5, 0x0, 0x8000, 0x0, &(0x7f0000000300)})
ioctl$DRM_IOCTL_GET_CTX(r9, 0xc0086423, &(0x7f0000000040)={r10, 0x2})
r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r14 = dup2(r13, r12)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r15 = openat(r14, &(0x7f00000002c0)='./file0\x00', 0xa100, 0x9)
write$UHID_INPUT(r15, &(0x7f0000000bc0)={0x8, {"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", 0x1000}}, 0x1006)
r16 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r16, r3)
sendfile(r2, r3, 0x0, 0x80000001)

11:03:37 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000001480)=""/16, 0x0, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080), 0x4)
r3 = socket(0x0, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000100), &(0x7f00000002c0)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x420000, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000140), 0x12)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
io_setup(0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))

11:03:37 executing program 0:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="34e7fffeffff3400f59300007f0002cd06eaffff000093750100000000070000b72b00000088445389cf1f3406001600f706807490073cbc1192c91de591e36c4a0000bf5b070000005e6b609c339c5ee041bb610e77fa3f91e698ac54711a54667a000000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r6, r5)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend='noextend'}, {@msize={'msize', 0x3d, 0x401}}, {@version_L='version=9p2000.L'}, {@uname={'uname', 0x3d, '+'}}], [{@smackfshat={'smackfshat'}}]}})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)

11:03:37 executing program 2:
r0 = timerfd_create(0x7, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r5, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r5, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x6}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000100)=0x10)

[ 1054.027122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1054.038430] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1054.044728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1055.016738] IPVS: ftp: loaded support on port[0] = 21
[ 1055.184863] bridge0: port 3(gretap0) entered disabled state
[ 1055.194673] device gretap0 left promiscuous mode
[ 1055.199671] bridge0: port 3(gretap0) entered disabled state
[ 1055.252158] chnl_net:caif_netlink_parms(): no params data found
[ 1055.280181] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.287083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.294565] device bridge_slave_0 entered promiscuous mode
[ 1055.411462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.417872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.425533] device bridge_slave_1 entered promiscuous mode
[ 1055.440416] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1055.558147] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1055.577334] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1055.584927] team0: Port device team_slave_0 added
[ 1055.591047] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1055.598367] team0: Port device team_slave_1 added
[ 1055.604190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1055.611391] device bridge_slave_1 left promiscuous mode
[ 1055.616873] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.661355] device bridge_slave_0 left promiscuous mode
[ 1055.666901] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.363585] device hsr_slave_1 left promiscuous mode
[ 1058.405647] device hsr_slave_0 left promiscuous mode
[ 1058.479170] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1058.516728] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1058.578439] bond0 (unregistering): Released all slaves
[ 1058.623715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1058.682793] device hsr_slave_0 entered promiscuous mode
[ 1058.720627] device hsr_slave_1 entered promiscuous mode
[ 1058.761487] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1058.768740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1058.783354] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1058.864593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1058.881434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1058.898488] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1058.905799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1058.919776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1058.936651] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1058.943585] 8021q: adding VLAN 0 to HW filter on device team0
[ 1058.962019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1058.969178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1058.984946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1058.995097] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.001500] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1059.012679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1059.021295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1059.029009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1059.041272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1059.052309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.058665] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1059.068241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1059.075512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1059.089743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1059.104116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1059.120049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1059.133900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1059.145273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1059.160432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1059.177918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1059.186087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1059.201482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1059.216701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1059.229343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1059.248766] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1059.255669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1059.269320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1059.295349] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1059.312534] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1059.318800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1059.332738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1059.345073] 8021q: adding VLAN 0 to HW filter on device batadv0
11:03:44 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioperm(0x2, 0x4, 0x9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$USBDEVFS_GET_SPEED(r6, 0x551f)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x84, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x78, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback=0xac141419}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_LOCAL={0xfffffffffffffff7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ENCAP_TYPE={0x8}, @IFLA_GRE_ENCAP_DPORT={0x8}, @IFLA_GRE_ERSPAN_DIR={0x8}, @IFLA_GRE_LINK={0x2ce1b4e294e4ee0e}, @IFLA_GRE_COLLECT_METADATA={0x4}], @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_REMOTE={0x8}, @IFLA_GRE_LOCAL={0x8}]}}}]}, 0xac}}, 0x0)

11:03:44 executing program 0:
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000000000000000000e0000004800010044000400200001000a00000000000000ff01000000000000000000000000000100000000200002000a00000000000000fe8000"/86], 0x5c}}, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r1, @ANYBLOB="00000000e1ffffff"], 0x3}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x10000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

11:03:44 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0)
ioctl$NBD_DO_IT(r3, 0xab03)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H`\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:44 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000000)=[0x8001, 0x7, 0x101, 0x800, 0x1], 0x5, 0x6, 0x0, 0x2, 0x2, 0xffffffff, 0x3ff, {0x3, 0x5, 0x401, 0x8, 0x9, 0x9, 0x7, 0x80, 0x6, 0x1000, 0xea, 0x2, 0x7, 0x8, "5cf11c761827c539e01ab4949f7044c910f1aed0e5b9976039d29401c0b04d50"}})
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00)

11:03:44 executing program 2:
mkdir(0x0, 0x0)
r0 = socket$tipc(0x1e, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x8000, 0x0)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84310088}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\xff\xe5\x00\x00\x00\x00\x00B\x00\x00\x00\x00\x00\x00\x00\xd9\n\xbf\xe4a\x01\xda\x12\x13\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\xef\xff\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\xff\xe5\x00\x00\x00\x00\x00B\x00\x00\x00\x00\x00\x00\x00\xd9\n\xbf\xe4a\x01\xda\x12\x13\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\xef\xff\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00'})
lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@md5={0x1, "0515dc700a770a323968fcbb0defb4ec"}, 0x11, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
socket$alg(0x26, 0x5, 0x0)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x1eb7db9206990ce0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x63a945de5ad2e48, r0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r11, 0x800442d3, &(0x7f0000000440)={0x3a, 0x3, 0x1, @remote, 'veth0\x00'})
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000140)={r3})
unshare(0x40000000)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000100))

[ 1059.606662] net_ratelimit: 9 callbacks suppressed
[ 1059.606670] openvswitch: netlink: Duplicate key (type 0).
[ 1059.626064] openvswitch: netlink: Duplicate key (type 0).
[ 1059.718495] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1059.727916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1059.747199] IPVS: ftp: loaded support on port[0] = 21
[ 1059.758136] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1059.781152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1059.792014] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1059.812893] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'.
11:03:44 executing program 5:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1}, {@in6=@rand_addr="02ed4d73062b85e8a45dfa2e6a347805", 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

11:03:44 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000580)={0xfffffff, 0x8000, 0x1, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000540)={0xa10903, 0x3ff, [], @value64=0x80}})
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000005c0)=0xffffffff, &(0x7f0000000600)=0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2a0081, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1000, 0x0, <r3=>0x0, 0x0, &(0x7f0000000240)={0x0, 0x4}, 0x0, 0x0, &(0x7f0000000280)={0x3, 0x6, 0x0, 0x1}, &(0x7f00000002c0)=0xfd, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0xfd42}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r3, 0x4)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'batadv0\x00', 0x400})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r4, 0xd956869880915253})

11:03:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\xfd\x00\x00\x00\x00\x00\xff\x00', 0x1})

[ 1060.443431] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
11:03:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4e3f92d4f8ced746}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}}, {{0x0, 0x0, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xc7}, {0x0}], 0x5}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)=""/230, 0xe6}, 0x9}], 0x3, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

[ 1060.558602] IPVS: ftp: loaded support on port[0] = 21
11:03:45 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000100)=""/17, 0x20000, 0x800, 0x3}, 0x20)

11:03:45 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = socket(0xa, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xbb)
setresuid(0x0, r6, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6})
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x6, 0xe2, 0x7})

[ 1060.648935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
11:03:45 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x24000141)
gettid()
r2 = socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0xa2)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000002c0)={0x20000, 0x2, 0x4, <r6=>r2, 0x0, &(0x7f0000000280)={0x11e16f2955fa55a9, 0x5, [], @string=&(0x7f0000000200)=0x1}})
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000300)={{0x1, 0x7f, 0x7, 0x80, 0x9b, 0xff}, 0x4})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
r10 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r10, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4}}, 0x2e)
r11 = socket(0xa, 0x1, 0x0)
dup3(r11, r10, 0x0)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0xbd913d4c08c7fb89, 0x2)
bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9}, 0x14)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003f40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000000003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed48000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008cffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c442781da7ea2f2e3593e0bb95b9616fb01ee7972d37f4a7222dd6f9266000c783f16b9f97abe80fbe29e586ea2fbb40fd6be15179d72caed9e3c9e65d38972642648cb59680f3db7347af07d6805808a84622e12ec0ff5ad46f5f099bee08d9c3b17b0cdd86d443b6c449ddda4e689f6125cf1656691950e2e05d3508a6d7cb79003df77c386146a25670020244e347ef0c336441b46903b1309e79df4508b0089"], 0x444}}, 0x0)
r13 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
bind$packet(r13, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00'})
dup(0xffffffffffffffff)

[ 1060.694131] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1060.711318] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1060.728544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:45 executing program 5:
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x6, 0x9, 0x49, 0x0, 0x7fff, 0x40000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0xfff}, 0x14500, 0x7, 0x3331, 0x5, 0x0, 0x4, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

[ 1060.790674] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:45 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000100))
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0)

11:03:45 executing program 3:
keyctl$join(0x1, &(0x7f0000000000)={'.\x00', 0x1})
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
r1 = add_key$keyring(0x0, &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, 0x0, 0x0, r1)
add_key(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r1)
r3 = add_key$keyring(0x0, &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, 0x0, 0x0, r3)
add_key(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r3)
add_key(&(0x7f00000003c0)='{\xe4=h\x82m\xa1O\xf7\x85&\xd7\x0f${\xd5|1\x13\xe2\x90\x16\xdc\x15\x16\xe1x\xe1\xdehp\xa6:1\xb93\xb4\xb1\xf4\x19~bz\x86\xc9\xf8\xd9] \x96\xc1M\x9eB\xc8\x01\x9ePQ\xd2\xc76E\xa4\xfe\xf9.\x97\xa7\x17\xb2\x19\a\xc4\xe5w', &(0x7f00000000c0)={'\x01v\xfe', 0x1}, 0x0, 0xbba4b4cae49611ee, r3)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
timer_create(0x2, &(0x7f0000000340)={0x0, 0x1e, 0x2, @tid=r4}, &(0x7f0000000380))
r5 = add_key$keyring(0x0, &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, 0x0, 0x0, r5)
add_key(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r5)
r6 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='\x00', r2)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000300)=0xfffffffffffffd52)
keyctl$chown(0x4, r6, 0xee00, r10)
r11 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='syz', r5)
keyctl$unlink(0x9, 0x0, r11)
ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0)

11:03:45 executing program 3:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101200)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0xc070403)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = getuid()
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, r2}], {}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x3c, 0x2)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000200))
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
r4 = dup2(r3, r0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, r4, 0x0, 0x10, &(0x7f0000000280)='/dev/input/mice\x00'}, 0x30)
get_robust_list(r5, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000300)}, &(0x7f00000003c0)=0x18)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000600}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r8 = syz_open_dev$mice(&(0x7f0000001780)='/dev/input/mice\x00', 0x0, 0x400000)
r9 = getpgrp(0xffffffffffffffff)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000017c0)={[], 0x92, 0x8001, 0x200, 0x7fffffff, 0x4, r9})
r10 = syz_open_dev$vcsa(&(0x7f0000001840)='/dev/vcsa#\x00', 0x5, 0x400)
ioctl$EVIOCSABS20(r10, 0x401845e0, &(0x7f0000001880)={0x4, 0xffffffe1, 0x3, 0x0, 0x80000001, 0x4})
write$selinux_validatetrans(0xffffffffffffffff, &(0x7f00000018c0)={'system_u:object_r:hostname_exec_t:s0', 0x20, 'system_u:object_r:syslog_conf_t:s0', 0x20, 0x0, 0x20, '/sbin/dhclient\x00'}, 0x6c)
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001940)='/dev/bsg\x00', 0x400, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r11, 0x5385, &(0x7f0000001980)={0xc3, ""/195})
ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000001b00)={0x0, 0x5, 0x7fb31369, r11, 0x0, &(0x7f0000001ac0)={0x9a0908, 0xffff7fff, [], @p_u8=&(0x7f0000001a80)=0x5}})
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001b40)={0xa, @sliced={0xc105, [0x40, 0x4, 0x0, 0x3, 0x7ff, 0x5, 0x0, 0x0, 0x7247, 0x3, 0x9d, 0xfd6, 0x8001, 0x3, 0x8001, 0x3f, 0x8, 0x2, 0x3, 0x8001, 0x4, 0x6, 0x8, 0x1, 0x200, 0x8a4, 0x1ff, 0x200, 0x7, 0x1000, 0x9, 0x0, 0x8, 0x8, 0x4, 0x7, 0x8, 0xe2df, 0x1, 0xff, 0x7ff, 0x5, 0x177b, 0x1, 0x40, 0x5, 0x326, 0x7], 0x80000001}})
r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/vcs\x00', 0x1, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/ocfs2_control\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001cc0)={<r14=>0x0, 0x5}, &(0x7f0000001d00)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000001d40)={r14, 0x89, 0x4, [0x1f, 0x3b, 0x9, 0x0]}, 0x10)
r15 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r15, 0x4604, &(0x7f0000001ec0)={0xb2, 0x0, &(0x7f0000001dc0), &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)})

[ 1061.091327] protocol 88fb is buggy, dev hsr_slave_0
[ 1061.097875] protocol 88fb is buggy, dev hsr_slave_1
11:03:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3)
write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
sendfile(r2, r3, &(0x7f0000000000), 0xffff)
fcntl$addseals(r3, 0x409, 0x8)
fsetxattr$system_posix_acl(r0, &(0x7f00000004c0)='system.posix_acl_access\x00', 0x0, 0xfffffffffffffdcb, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0)

11:03:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\xfe\x00\x00\x00\x00\x00\xff\x00', 0x1})

11:03:47 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)}], 0x1}, 0x0)
accept$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@rose, @netrom, @remote, @default, @rose, @null, @remote, @default]}, &(0x7f0000000100)=0x48)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4001)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
dup2(r1, r4)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r5 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0xe0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000180), 0x4801, 0x0)

11:03:47 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
sendfile(r1, r0, &(0x7f0000000000)=0x100, 0x2)

11:03:47 executing program 5:
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', 0x0, 0x2})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b48", 0x45, 0xfffffffffffffffe)
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvmes\x8dL\xaa%\x8e\x16\xea\x00', 0x1a7ba7f0e135e841, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
writev(0xffffffffffffffff, &(0x7f0000000b40), 0x0)
sched_yield()
r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', 0x0, 0x2})
r5 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r4)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000340)={0xf154, 0x3ff})
add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000002c0), 0x0, r2)
r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r7, 0xc0845658, &(0x7f00000003c0)={0x0, @reserved})
r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r8, r6, r8, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000006c0)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf1\x0e\x00\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,\xba\xfd\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3\xfe_8', &(0x7f0000000300)=@keyring={'\x00\x00\x00\x00\x00\x00\x00\x02\x00', r6})
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380))
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
syz_open_procfs(0x0, 0x0)

11:03:47 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x0, 0x100000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x3, 0x5, 0x42, 0x5, 0x0, 0x87, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0x2}, 0x21800, 0x40, 0x100, 0x3, 0x3f, 0xcc0e}, 0x0, 0xb, r0, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_pts(r1, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
getpriority(0xf12fd0d5861fc6, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17})
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000180)="e2ecf2dadb9f0e1d0062d67d9b9cb6d1ca916b7bd8dc4a9d8a3134a66f4e432e46d5a5380674a96d6103dd328a32cc42b2261bb14e779029d5c54ebfcc3f55ff5aac3dfc2b05200ecf7956ac6a399c545dd6be0759a795e6cd40b3276260c57ae17878877bf0542b17a801180025a28421b74b770149931b1ab8b1206bfb7b", &(0x7f0000000200)=""/140, 0xe}, 0x20)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000028e000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4)
r6 = open(&(0x7f0000000040)='./file0\x00', 0xc0301, 0x80)
clock_nanosleep(0x3, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000000c0)={{0x1f, 0x6}, 0x1, 0x9, 0xfffff51a, {0x6, 0xfe}, 0x27, 0xfffffe1f})

[ 1063.106274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1063.153409] bond0: Releasing backup interface bond_slave_1
[ 1063.191629] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1063.191671] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
11:03:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x200000, 0x0)
ioctl$BLKPG(r2, 0x40140921, &(0x7f0000000000)={0x0, 0x1, 0x92f4c, 0x0})

[ 1063.296877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1063.311534] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1063.318629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:47 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2})
r3 = memfd_create(&(0x7f0000000100)='nr0\x01\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @remote, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e21, 0x7248, @remote, 0x1}], 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1')
r6 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0)
ftruncate(r6, 0x200004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r6, 0x0, 0x80001d00c0d0)

11:03:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x03\x00\x00\x00\x00\xff\x00', 0x1})

[ 1063.703944] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1063.731444] device nr0
 entered promiscuous mode
11:03:48 executing program 5:
socket$inet(0x10, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000240)=0xfffffffffffffe24)
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x38, 0x2e8240)
r0 = syz_open_procfs(0x0, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000240))
accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0xfe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000340), 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
socket$netlink(0x10, 0x3, 0x9)
eventfd(0x0)
close(0xffffffffffffffff)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400000000764356f400000062100000000000000000850d4f3f874d2b91a98f7af625785ab54446320a164c0c8db3c51dcd2876e97b1d5ee080f7c8c0f1372732cb13f8feb1b94f550749bd711d8301c28ca005f4de778a990db3dd5286f68946759e61d1deb9a0c8d832aeefc2dbd647a2251bb97adb4bf1a4eb4459b0a2fec476725f232ea9f7d266", @ANYRES32, @ANYBLOB="ecffff03000000ff"], 0x20}}, 0x0)

11:03:48 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x1e1)
r0 = open(0x0, 0x100, 0x85)
pipe(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x3)
request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0xfffffffffffffff9)
request_key(&(0x7f0000000140)='logon\x00', 0x0, 0x0, 0xfffffffffffffffd)
syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00')
writev(0xffffffffffffffff, 0x0, 0x0)
sysinfo(&(0x7f0000000880)=""/166)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup(0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x40000)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', r3})
ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000000c0)={0x1a7, 0x85b7, 0xffff, 0x0, 0x2})
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x9, {0x4, 0xf62c, 0x1, 0x9, 0x30, 0x4}})
syz_open_dev$dmmidi(0x0, 0x100000001, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000005c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80'})
getsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000180)=""/50, &(0x7f00000002c0)=0x32)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000340)={'bridge0\x00', 0x0})
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000280))
getdents64(r4, &(0x7f0000001080)=""/4089, 0xff9)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1063.960366] protocol 88fb is buggy, dev hsr_slave_0
[ 1063.965552] protocol 88fb is buggy, dev hsr_slave_1
11:03:48 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r8, 0xa0b}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20d42002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r8, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xff, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)

[ 1064.160041] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:48 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x0, 0x100000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x3, 0x5, 0x42, 0x5, 0x0, 0x87, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0x2}, 0x21800, 0x40, 0x100, 0x3, 0x3f, 0xcc0e}, 0x0, 0xb, r0, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_pts(r1, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
getpriority(0xf12fd0d5861fc6, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17})
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000180)="e2ecf2dadb9f0e1d0062d67d9b9cb6d1ca916b7bd8dc4a9d8a3134a66f4e432e46d5a5380674a96d6103dd328a32cc42b2261bb14e779029d5c54ebfcc3f55ff5aac3dfc2b05200ecf7956ac6a399c545dd6be0759a795e6cd40b3276260c57ae17878877bf0542b17a801180025a28421b74b770149931b1ab8b1206bfb7b", &(0x7f0000000200)=""/140, 0xe}, 0x20)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000028e000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4)
r6 = open(&(0x7f0000000040)='./file0\x00', 0xc0301, 0x80)
clock_nanosleep(0x3, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000000c0)={{0x1f, 0x6}, 0x1, 0x9, 0xfffff51a, {0x6, 0xfe}, 0x27, 0xfffffe1f})

[ 1064.224964] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1064.252724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1064.263926] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1064.281692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1064.410377] protocol 88fb is buggy, dev hsr_slave_1
[ 1064.475323] team0 (unregistering): Port device team_slave_0 removed
[ 1064.521838] protocol 88fb is buggy, dev hsr_slave_1
[ 1064.554823] team0 (unregistering): Port device team_slave_1 removed
11:03:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x98\x03\x00\x00\x00\x00\xff\x00', 0x1})

11:03:49 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a00000074d900d7c2fc742ad21f1d698ea4dea42812c7e03049f44619ed1307d89524429adc542c0200000012aac7000000000000"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

11:03:49 executing program 4:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x3, 0x6, 0x7ff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:49 executing program 5:
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES16], 0x2)
fallocate(r0, 0x0, 0x40000, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fffe)
r1 = syz_open_dev$vcsa(&(0x7f0000001500)='/dev/vcsa#\x00', 0x200, 0x80400)
symlinkat(&(0x7f00000014c0)='./file0\x00', r1, &(0x7f0000001540)='./file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xd000000, r0})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r3, r2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000002e0b3836005404b0e0301a4ce875f2e3ffdf163ee340b767950080000000000000013c5ce34fb7ed70f4775027ecce66fd792bbf0e5bf5ff1b0816f3f645f6670f28ae8fde00000059740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040), &(0x7f00000001c0)=0x14)
setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0)
ioctl$TCXONC(r4, 0x5608, 0xfffffffffffffffe)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x1000)
ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000002c0))
setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000001340)={0xfffff5a6}, 0x4)
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40000080806, 0x0)

[ 1065.028957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1065.061602] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:03:49 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x13d)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x10, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x2, 0x100000, 0x0, 0x0, 0x0, 0xfffffffd, 0x2000}, 0x0, 0xffffffffffffffff, r0, 0x7)
chdir(&(0x7f0000000300)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x110001)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r7 = dup2(r3, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
perf_event_open(0x0, 0xffffffffffffffff, 0x10, r7, 0x0)
r8 = dup(0xffffffffffffffff)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
write$P9_RLERRORu(r11, &(0x7f0000000500)={0x10, 0x7, 0x1, {{0x3, '9p\x00'}, 0x3}}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8b36, 0x0)
io_setup(0x0, 0x0)
r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r13, r12)
r14 = dup2(0xffffffffffffffff, r12)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r14, 0xc058534b, &(0x7f0000000340)={0x0, 0x1, 0x6, 0x7ff, 0x6, 0x2})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@ipv4={[], [], @local}}, &(0x7f0000000180)=0x14)
getuid()
mount$9p_tcp(&(0x7f00000002c0)='127.0.0.1\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x1000, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_none='cache=none'}], [{@fsname={'fsname', 0x3d, 'devtmpfs\x00'}}, {@hash='hash'}, {@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0xd98904158b033e5d, 0x35, 0x6e, 0x61, 0x38, 0x63, 0x38, 0x66], 0x2d, [0x66, 0x35, 0x37, 0xc2], 0x2d, [0x32, 0x31, 0x3c4add785e190812, 0x39], 0x2d, [0x30, 0x33, 0x33, 0x31], 0x2d, [0x30, 0x9a77dba3edbc73f1, 0x34, 0x35, 0x3b, 0x37, 0xaa75e0baf3670891, 0x3e]}}}]}})
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)=0xfffffffffffffffa)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)

[ 1065.077680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1065.094141] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:49 executing program 0:

11:03:49 executing program 3:

[ 1065.169741] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:49 executing program 3:

11:03:49 executing program 0:

11:03:49 executing program 2:

11:03:49 executing program 3:

11:03:49 executing program 0:

11:03:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x05\x00\x00\x00\x00\xff\x00', 0x1})

11:03:50 executing program 2:

[ 1065.723613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1065.735090] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1065.741743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:50 executing program 0:

11:03:50 executing program 3:

11:03:50 executing program 5:

11:03:50 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r6 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfa9, 0x9, 0x101, 0x8}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2800}, 0x40001000)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0)

11:03:50 executing program 2:

11:03:50 executing program 3:

11:03:50 executing program 0:

11:03:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x06\x00\x00\x00\x00\xff\x00', 0x1})

11:03:50 executing program 2:

[ 1066.018035] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:50 executing program 3:

11:03:50 executing program 0:

11:03:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\a\x00\x00\x00\x00\xff\x00', 0x1})

11:03:50 executing program 2:

11:03:50 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000100)={0x3d, 0x2})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x7000356, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000030006000a0002000a0ada1b40d805000500c50083b8", 0x85}], 0x1}, 0x0)

[ 1066.313710] device bridge_slave_1 left promiscuous mode
[ 1066.319373] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.399235] device bridge_slave_0 left promiscuous mode
[ 1066.404900] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.603809] device hsr_slave_1 left promiscuous mode
[ 1066.657151] device hsr_slave_0 left promiscuous mode
[ 1066.722973] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1066.777991] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1066.939655] bond0 (unregistering): Released all slaves
[ 1067.025134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1067.047727] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1067.067147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1067.090795] veth1_to_bridge: FDB only supports static addresses
[ 1067.106370] veth1_to_bridge: FDB only supports static addresses
[ 1068.397017] IPVS: ftp: loaded support on port[0] = 21
[ 1068.462459] chnl_net:caif_netlink_parms(): no params data found
[ 1068.494853] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.501402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.508461] device bridge_slave_0 entered promiscuous mode
[ 1068.516063] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.522549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.529533] device bridge_slave_1 entered promiscuous mode
[ 1068.547723] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1068.557380] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1068.575867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1068.583487] team0: Port device team_slave_0 added
[ 1068.589164] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1068.596735] team0: Port device team_slave_1 added
[ 1068.602709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1068.610527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1068.672317] device hsr_slave_0 entered promiscuous mode
[ 1068.710643] device hsr_slave_1 entered promiscuous mode
[ 1068.751076] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1068.758328] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1068.773077] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.779438] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1068.786123] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.792504] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1068.829725] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1068.836396] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1068.847247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1068.856436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1068.865212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.872427] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.879448] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1068.890028] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1068.896529] 8021q: adding VLAN 0 to HW filter on device team0
[ 1068.907504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1068.915217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.921633] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1068.933794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1068.941755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.948099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1068.969382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1068.979392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1068.990632] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1068.997910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1069.006331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1069.014232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1069.021825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1069.029340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1069.036412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1069.050408] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1069.057958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1069.065458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1069.075945] 8021q: adding VLAN 0 to HW filter on device batadv0
11:03:53 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c09006572474b8e6469723d2e2f6275732c776f726b6469db5c89c44b8d59bc390200000066696c65312c757070"])
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00')

11:03:53 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014010, &(0x7f0000000080)=ANY=[])
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000080)={'team_slave_1\x00', 0x3})

11:03:53 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r6, r5)
close(r5)
r7 = socket(0x10, 0x2, 0xc)
write(r7, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:53 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7dbf, 0xc7bbde80ec21cc0a)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x619, 0x4, 0x2, 0x6649, 0xf3e, 0x9, 0xb1770, 0x6, 0x80000001, 0x7173, 0x9, 0x4, 0x3, 0x9, 0x5, 0x2, 0x6, 0x93, 0x0, 0x9, 0x53, 0xab9, 0x5, 0x8000, 0x2, 0x5, 0x7fffffff, 0x8, 0xe67ddac5, 0x6e, 0x2, 0x8000]})
bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0xa06c0585f31ebb4, 0x2})
listen(r1, 0x8)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "3926d649d51a3266", "480ab4b55c0dd507698714e614c5e19427118abd3c3d9df4562a2a67ac9460c3", "9ca3b590", "4126559203d9796f"}, 0x38)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000000), 0x4)

11:03:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00 \x00\x00\x00\x00\xff\x00', 0x1})

11:03:53 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fanotify_init(0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000540)={0xa20000, 0x80, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x13212e0, 0x1, [], @string=&(0x7f0000000400)=0x1}})
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000700)='pi\xf3\xefD\x95\x94\x03\xf8ss\x00\xfc\x17S\x9b\x8b\x15k\xb73\x94W\x86\xe4\xfe$C\x80B\xf8\xbf\\c\xba\x97j\x11R\xb0+\x9cdaO\x16\xe1\x80\xb8\xf9\xd4\t*\xcd\xff;2\xfe\xb4\x1b A\x85T{\x14\xd9\xd4(9\xb7\x1d\xd3#\xea\xf8[#dFC,\x11\x91\xe5T`\x17\xa1R\r\xf0\xb4\x928s<\x1e\x87\xe8\xa8\xb8\xe3\xb13i\x17\x06\x00\x00\x00\x00\x00\x00\x00E\x8aV\x8cBo\xe4\xd7\xae\x91\xb3+\xdd\x97s\xb7\x06\x99\xa6\xa6\xf0\xcf2\x10w', 0x26e1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x9, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd4)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r5, 0x100000000, &(0x7f00000005c0)="153f2234488dd25d76604dded411247684344a8cc9deb18fd15f7c8e2b1d66fc810ea15fe752a8cbac68102951c74079f592c739e68616f5fe09b94b3b1a69f806e9a42c0c87a4857d83016cad95a95e730b1383af92f22b84e9488914b77a4c2d473beed8c55e0fbc7319a1")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff})
r7 = socket(0xa, 0x3, 0x8)
r8 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000800)=<r9=>0x0)
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000440)=r9)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10})
ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f00000002c0))
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44)
r10 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r11 = dup3(r4, r10, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffe7f, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="afda8f976352d83af92ad006a654156634c9580d025a47abab93879ae67c0942d053ac0c86ab5716896f309d8188f7aebc826ae44c77000142692d4ec1611dbeaae3c7d7b197e00d4e1184e6ad52226aa186f6c9777704390f26b8b27bc97d197a1df70f40f4c0df1c6783385d94b7095fa797"]], 0x8}}, 0xfffffffffffffffc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)

[ 1069.171457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1069.197730] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1069.199892] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1069.227710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1069.251965] overlayfs: unrecognized mount option "l	" or missing value
[ 1069.270413] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0
11:03:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x20, &(0x7f0000000440)=<r0=>0x0)
io_destroy(r0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
sendmmsg(r1, &(0x7f0000004540)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000140)="483af14dfda572500139b3e1c2bc5eb1b1f578314522f91e595df90d8599827bd99cf8fa872860fb35e590d90331e4379083be68a24399f31d40b72f38da1bd0d2d33b4a62c7ec8b0bc233cd5f6fedb7b3f618b57513ed2f82e9223dc39c6821838d79c582d0ef13eb23a25c5a7694bea7766115ac9c53a07eeace2e8ad042a018239e", 0x83}, {&(0x7f0000000300)="973a7a13934522f2e7765244a104b1b44eefb2c5ff0fc5bc854d46a4674f67538d86c924ad5cefb7d22d94c5cec372fed8c5dbe9d8ac29bdf5adea1c498ebfd9823f9097752ab68da8ff4fa3cd39b86ea877b5b41c0c4ba96302b89b8c035182f78960814963a84a91389ad01cb025fab79f51d5dfced35120750f79187268b955dfe316cabc23e07163a1a0ff12fde674", 0x91}, {&(0x7f00000003c0)="f3f4d0b3bb83a7928e570315329ff3c2494408821472d10ede19fbf50c53fc51dccaea38f9514764ca53bbbba6b74f7fed2337b725884c5c64ea7668914488f2fcdc219877b976754e5ce10f7108f3aaa3", 0x51}, {&(0x7f0000000080)="0413c5c8341ba0af575010f8355a7c4c8634901c3ec810", 0x17}, {&(0x7f0000000480)="f5d8a50cada5d14a4af70a8cb64fffce3c13cc92e5967797ba6381ad7e38c9d50f125611451bfd60a0f075e9c7ea15da63d7bf57b1585feee16c753e10f26ef31ab3c73eb52e81ba74d222817e646dc892229104b167650b27dbce069753f456cec261d86df66ce6b2bd8cde464430017e0b4f953b5a73ac7a2a31cb915d07078a9639fa75dc7971183b711941aceea4a4aa", 0x92}, {&(0x7f0000000540)="f3e2edaaec2f3056f3df486bbadbb73f5d0d78bcd0f691ebe0103c8e15f383d7bdbe98c9c3b098b4d6ae9a087fede10ae71f6b39a9b1f037c59b84f752889b193c3b6ec33eaa618fe8b9927d3bd4be997f4a29afefa7937eda2dca66ecb7289bd292deafbec3bc4400ab8d35a0d1388c618417b74e85e00ba984bad3ac08dde6c876a41e86426d54a2da0b916fe02c02d34e2b8dd219f7c06c684bbe325019aead3d80ed19b6f8bab7fd00fe06331ace45170665428222db6392eddde8e1510ef8ce9ade13793012159ee7db2568b3f798deb850c8e07fbbe643a61bced12795f244b38b1a0df332d3caf9252c673e4d0e87077249eda3c96a23e3f0634363b86a89638d62c931f2c4eb7e3b19d57dc920f231917825e79efe6b94fd88c72761a35fc61448d34813e26a70bdd8799cce68f55969e574d5926c75ff70e74dc1332a5c2ee4511c1aaa8ca47e9bc20fab7b8ba0dc0ec250a748037817e4712fa4725503f1bc3d46aaa8b179218daf30bfaaaf4464ec8dd8bfb15153a7df116abb7185b2cc7b82a2419bb261d339c0cf3f950b50c2018270b8d6e5e763fe8d4c02c5798dc5a0dc2ffa0632755bf56234a030b3c00249223556a712070ef93361b067557aa822a40b92b377f688c582f48ef6e0431992e89f307f11e3dafaa8b84e4a6e30981bd2765fb785bc53b971df17439353e4a40104d5de47ae2ed1e5841897acfd6874e787fe96375d3d97b8a1f9913a25fe36afe347955f8c7ea1cd1e87e52f2b190d5f7fbd3b92553a575f61341dce8a1283a0271a8c44e4e97c0d6db4f6411570849ab005339a73ff96aae2c39dac9c7569566a5ec69831482862fe869e5d784bc83ef2a69a274ce3d1c0286f027fcdbfc1b3cf328bb9ee08368033077d69480d289c258c9560ec5c26cdf375a290f0eb752d73d90637375926c15be97cd0791401abe4ffa18f78659ed24be5820fa23cb44770add534fcdb47ac8ad072c39170c10cdf7a5752a03cafca6ced11eb6c32f7a885173b3831c934cd60da566c8461a0d456f4d35a1d744adbd5ba219999bd6b34c937cb1fd07b850a8a8dc5801341fe5af9bf8cdc48ac3505ff525eafb262abf609636229243a257809b0f160d40311afe0f55c344768a40a811620c3e77ce2eede3ba37f3971082986f7276182152d90945aed573e0a16e34cbbc27d4987b9723e796f567e6463da0d9a2d270f29d733875d22b2176c62fedfc8a7918f09c3ee2690a505bc4a6c99e78a136145e10895fbe315f52aabe0af1d017072c3b2f39c72b8f80b605c43748e269fffbfd43d92471d66abb5d31b356dd6751cac88d651522d0319a65cd6ce76bd3b85015f7afbf2195f4e55898b786c3580b7277dfd99cc91cbabfa7f4e1985dd72c4b7e7b499e921c99d0c6b89040df5e5a72f85e4108c2cd9babd1b0296dd9b34af5e3a999a2fd069407ac6ddbaaabb4086835c6333b1a0d193ea41e096b566a7d858d507b688bdda58b1eabd19070090347a66ecb1e05f07400e42115d58cb84505c034f594d96c05fd2f3e2e840ca8a7a462616326573a29c850fef9afce368c0e6be6f4171d4b1cd93161c04d39fd4522646d9bb7b1dbcaf31b93a8185c4f8d3ab9d6843ab6123fa4013a9cdcd04599d74c98230af8827fadea6b94e64134385e2484ca3a2a5536c0bf70626372cd23c75292ba8f00eb697f4de351abc0b34ed6775c6c9f7ed5550fd781dff3d783c0844c212492e7dd24e578c0abe80e99fc8c4501a232561f1b707214c418f286d63b02d152873f05801f6332ce5ee8ac55fbc3031c9102ebc52205ced4d7c5faad7eb13810a480405661cc273688a1d7ed2f6446942ae08f371d0990c4c84c752130a4f7e8ccec4f60c21e6b71ef35d6c14951a3a42a5b3ba24b5591de7187a651e0dc738189018b691da58fe6d76054a9dbb448110f1f24fea49ba14efed5a931b2292b478a4d3fdd608b88e26b4c400a95538f5b9b0d7510318d5c3bb97a587df4f8e8b477e4ee05d6b483d30c4f466dbb3a25a168a9ddf6504f589050a27918d0d9cbb8b1d12fcd2d16ed114c06554e2654d5cb20513c1ce0457dc14e3639dc3f72b63ed5a9df3129b6a11048a51da82ea4d570e2c4373fcf9373b28c0f05c637ab7ec8cdc1d6d52134b96da682e272c37edc05c46d99b0dd4126999bb64a672e8928184f6144863aef72a640ab7e4ab36650f7423a8535bf0a73be09e0ad4a64ff3dd35d379b4edf11fb39129f68c0afbbfe968ad98610277abebc513d9059c9a7a2bc76f7f6e7740b7f0fa824c29c458a76267e9fa593158b712a829b78bcefa1f7833b1c2853a2c2951ca569432ebf129493d367f2cafc0c6d2952644f97a0f42e9d619b8185f4529321c871cf5e3e39ee7d8de3fadb3514e317dfa4f6eac02c9d4bf8a2c396574f38f86e972e7784b7cdd2c60cfdf8fe8ed73a4b495b77a283f08d7cfc2c2f2873ed862d9db374860606e0e4e7d9733264437de09e3ee4f4b6c7d0796543d52a2b286a03c03763facc75b8f32308a78491a71ce073b6a9d556295b06bfc7190ec0a2c26a5ef520ee8ae5c79714c6546dbcbf668dd47c0296e49af3df1f5f6aae7fa65bbca3dd399f669170397c530bb0f3d6043b9965a3c3810e85c5805995736a490da4fd939c1cccc433bf62bd18ed42d056d592c2415d7dab2aa6cef6075f4cb1f9cc6a78982136362263ca43456d43875d592a8a83d3b6fb617012c8c4e9578e4c6f393598f954a848f8ad3ddcdb863104a96ec3a03ab1bb778f195d0880b4fbca78344ec2af184dac5b2da17831f89e37de07c8d0a0a00f481005da5e74877142769b43e0db21ef9b9af20c5dac74afa700761bb86d6eba7ed5d2fdb037c6374fcd26fbea1f1a58308a475b942472cb890c7ce9183db675279a12e035be61a2f32335b1dd0eab2159ac32cca75e7c81f108a42b3493a4b9cb617645e00b0edd081b9b8caaa76c657dc8164f1f0e2232325ac26a14e51e3f5f42004174406a518c971e1c3912af86d2e36f4136e699f3e4c3ef64c21544e503a4f3e8e8086ff920f243ed85b7be74ed553bf4a501d2fabbda69b4ed875f199369ff092257588ca9fcc1eb3a3fd24d763af632f04f9803df8a0f92ff409c012f40ef84b1d85a85d9397c0b193ab0d83a1724ac728401df8e55e0f13e74969b78b88381444ad7054391213687e34533d2b012c0d65ae1b0c3b6c622f4d4f9cf41372c7800b04fa66818cfd459e25bec4862c0be22c51ade16e4b411cc06bc6650d35deda2e35d7b2a103ae46dcffb894b24881beeb4959bfe3c7ebd64610f389e55c861e51b4c02bf8ebc18b14aaa85aea33ae978444e8ccd964a8071517f3cded30bfb694a369c35f2922664e15ad722824ab7d605f78731f04dc7e18f4bfa9d82aa784ff7896c5e33c900534d0b0c8c186b4846a4c7c676f57e56746a42a2440ca496a314b83ea75fb7a3544428df431fbd0aba262d6cb8335265bebb4e5802f6848ba65a88a5a8dd2d9bbfcc04cfb081fdf871f4b8a15b7bfbbd5896d5db8f090d2c0bbf45fbabe8de891264bab8ff330bc8ee97d2346e6e1ba50a3eeea6b3e588d7aa2de92e100cec6f2c498d42b7ee64f95396e1545fd6ec601f0badd36b51bfd93ee7b0e5464b3386b0d44458b17e74c61fab81954931d91b851ddf43a9410ed6907635d81289805f988640aac39052261e69cae303259a64762ff5296b71a0fb213e7b8e49f482249f9bb9afc7163ea01fec05bf98a2dbaa541b5682613562706647b8eaba77b21ad69cb0a5a6c04f51d6cc897a64f26efda3f806c66df26e5b534581cfd21272190dd0dfb07a5a5bc394d546ea8979c9dc88728378115361315b2477b9f3d65f9b885e42113b6247cb62405e7d798841ffb0f4b10874b47ae5f0d1edd9a3af598175070bc320bb0da23ddeaa01d615adbc00717e5e12fe3c3e1047247c21205955e4ec7c54d1aa2879173231c8b81f9febafb84abc83977326c1ae2cca8dcbd1f5aacfe3e7ea800e226d30b73f3b373c620b576fbd1134ffc910f6b0c5266a68610eca51a1f3bc01d5317226f98ee8bc7534924591d1e00862e65e00330bc309e456d20c4d8c3c2fd3b04c1c92730e064e3b5bf21a8314f3e1837d573fcfd387497a5fa491b6f9514134fbe3a7272925167be5c54efb7f32347d12cf38f9210b20484e7da579a8ebd69f91c24f562c92f37a7d1dae938645c51ddb618ced2b902ebde349a60a6c0b373752bbb9ba31ae412ac458df93e5ea87b2fbbcacb13298953cbc013d20d00cb19ac8a864df1205ddfbb7b94fcfd551b0c6e60d51519db8f2002940c16dd008f6544da3ecbf8396080123348f5b6635ced3afe7da95d5bb4fa7b4880b3e819fe51b7a4f883689893a8c70ab62f0e7bc19e1a33c532809b04ed6b6106ef01cfdee60e32b1f33421f729fed6105978c83ac031aa037067b47d8bec1d50d8046e95c09d7b25009f83318f004a567af4c056ebb612162dda694c7128fa4a398f7eb139d05029061a8ef1c5749934de2c5cfe1c76ac3f630a788cdaccc8098ef5da540ae3805c26e938581404d67e9271a940d151b201c33e851328f341ce4c4d22665a1238b0a2fb8d5f43a1465baeb6cec617ef04d66216c5c84dddb6a0f9fe347b1443c6621af10303c8d43827f3f8f3b50071c888a87513b03becb7833aa1ba8f6860dd096cb2b6a317483a16214cf01641adbf7a7b30f1f1e6643347ff19321a81f221d5162d7c56c4468ccfcbfa97790c70943e337900afe419843dc2dfe89e9e89ba50268d5c5c0b05504336d2c5b1e25855f5c4f9c97f45f1c4242bfb005aaee34e358569656f791097e68a4f36dab0a26a2402bebfddde8d3ec8ff7ad6e72af62a06c9a0a18902e824cc5e898c0fc0a4dda290aca09ede6a8fb96f9e4ab0153ee6452defd1ccd5ff25e6288e7b09baebe7b11956877ec535c8af41556fe545921ada32a4a368c8e714e9ff9c8c3a9d2f8535addb6f24043dea62ca43cbe115d52a7649f5672c86aa32a557ed227b4d413755f42ba40787afae8fc281b65caf1d95beea72a44a570cc7a1bb9ffe0b6c1f79abdc26b4a1814be39abce1ff648b6d685a1d9615039e2bf12d865dc2ae493dbdece93fb7d02285595eddccc6b02596f7e23053d6df6b60ad803a18faf40cff5ed06a021c7c5fa011662036622af5bd9621edfd5a49917939b9db8f58ed95ad61f793e11e60eac1904bcfa44e8891549aed8c9b5268a5e8446dd77a3c75015dbc5d8665a58ff563ee13cd2e67721df356d0d6b1a3ca9cb57be93138d90ae2bf4256ace26d5db8f24ffeea96243ba73511e8509c88177e108c42a302ab5a9c57a848b59bf11491c3324d797d4ec50bed598b503bcd35999d72c98e2741e758c2158d80c18141f94fb3c09a32412c5fce9d5d3e2d83b90b5e2e41016cc287ae611f59fc6f85cd3d99db14efdd05581da4cf1ca76985f842c7a691518aa717538f43cb71e25e62e055cceb2cbad9d7f20fa0d7deec437fa55aac4c57d081c721ee1e9f57430411cc23e3e722f5a76355e908cb8220a533c59ab632b3114ca4d8b4371251deef40aec5c039d30ea9dadfb68277251038e2a676905b46661d5af82693ce678c4b36812925074dc018dafebcaee3eae3c2b19545a724e693df4aca72e81bc99f30e9bc61d9a6e5319388ee30f5c8c01151e66d50d9d94e2070d4de115913a60f7a66a5bcd88bbd7ae9d651c65d72e95625f3fdb58f91d7058c0f6ae890e938f1daaba0", 0x1000}, {&(0x7f0000001540)="67d9d757263e07437d518e56401f35dc4f163cfb17467fb6b4c6ab49eed40d6f967051071ac93c51fd9fd84eb55283dab07b17a288a3da7cf8168e8a362d2a70d41d6cbdec7e058dc0d80fe50d12fa23d84e3527182965940283f4cb2f53ea6ece0d2d30e4b7ac0911fb8e5b1e93c49e8621001382cf95e5f237c2267fa8347314b275d811410f55a867e28d6ca0f3469696bcf3189da36bb7dde15a67ffd56e270c1743f1f008c3213d6cb6962eaa601f48b525da5c8d18e507602151a6acc75b48bed5086093d51923e9c262f51ab5363e1f28354f2888a9de723ca7fd9ba87d9c", 0xe2}], 0x7, &(0x7f00000016c0)=[{0x100, 0x2e8, 0x1, "af4749901d20727352e331282ed0533ddd29597b17b07142caed5ec311f1edefb46a11e8a0fd58ff412290e22f2ab8c54c2827a9f7b8981604c47f010b864f421a0835c1d395561a7b94f5b687a4c2853cff295d95ebda9095db920411a97997c8ccf5f9a7b37b8c791eb851eb3c4e773005ee263a86febcc9c967550c803707cac3e2388c2001706eae03b8748258fa5c86b5144c2d3ea9d33931108f5f07254e38d97916cd55c7ab0b0fe32810398b3b25bb08d95fd9a7ec96893f72e5b408649788232feec3e019fedfb8c74e99e2c118b33858e10e9bf7a129bd476673fa2ff94a74f178701ed4ed"}, {0x40, 0x63, 0x8000, "f58b3cd5e0cea382e63206d52b5b181bb4bc36fa4813e3b11fa0797702e40eab0a20cc671b9270ec517f8b5e92706e2a"}, {0x88, 0x3bc, 0x0, "6c3b6a6dcf2bd436cd2b5b2c97b0a5ce550e4952e57e1e79d4582f932e02c193cee353dd01673318970fa36b79b6476de2cd5947ecd7d5dd5c646e369787d8684d76054cc58bda9f831b3a6cdab8f0de19a15b95816dcc9e189dee56db2ddaa4c81a48fcb1bacef07cee124f80fed799951b4d9796"}, {0xb0, 0x88, 0x0, "83247e2b7a3c291888a780ee25dee991318168a4dfb1c527f4d511c02543ae4a35fbd71528bc91220dc66bf8ae7392a3b0c0f5a6ef8e286df2eff836d9d6ff221395da3337b3781933cbe708e9e672a9f471ebcd58eef36c11e20bcf1a474c2ad8a10e892e2d3a9de9fd38b67a8e106cc3866744d709d1086407a5a0762a8593983a6a738724e2eb458b1095fe7647bc0945c078489728a6ebe73f"}], 0x278}}, {{&(0x7f0000001940)=@vsock={0x28, 0x0, 0xffffcb67}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000200)="29102ad12f", 0x5}, {&(0x7f00000019c0)="f9b853f4310f74502198a973b37feacb8d3d5f0c0ffc424ceee96f8a5eabd0476dbc0188933824627766735294296875", 0x30}, {&(0x7f0000001a00)="e017927802a0e008777baadc18e853e419cc22175a7809c49b6b36f32fd6e910057c798700f23d65b5e52ac15f10f92191888ef3188a3f3ec22ad86b30529273453563504e789afc6ca013e445fdd2169675fe0a87164c9ce1b3d850d8b6b8e9612ebcf44f66b17214da83008b102ff05be4e6fc5138675e895229a308ef2f1ce669a9c9aa8d39ae98eed741bcabfb49458d330a4ee10bca5dc2546a481592c3ed00e144a3bc0456b1cbf4de2f6bd3f8de258e1ccb7e5aacc0139a8742cdb3a9b10756e1b0", 0xc5}, {&(0x7f0000001b00)="367911651cc1dfb059d919198c57a89b89639f94d33380fdddcc0fa8cf788c35cb2045957da702aa9b777ccb6d2025b69be68a4380ed3c1210d1e51da280f03acb8127586a37274ea934f494e035b978181ae62493605636b173140eee305666290aa2ce7a073f37870bc83e13da91c180f051047a4fef13c2ed1e1060e42957dbb081b3990bf75a8e8e31150b1d6917ea7fef93e31d976731e30c94dbbf92b7626633ac817439dc688da8f91d67ee58f2020062e91c41b05900c497c2792d3c6f4a786d5253252bf4fb91665bcc9b001a919d4bd35f5cbb3eeb7cc133bcd4", 0xdf}, {&(0x7f0000001c00)="9b2a6a6a28289d213794bdbcefd03db9b5da50d96044e4ac7d7d0f388f3db88f2de1d36ca554b83a36841c4dc59517edf3a075898466179db023ea94bbb0412ad9c91966ccbb675054348abbbd1746601fbcdd3ab0486a14c014f4140b0df5090da43af4a4fb550fcfa114083f666622f2de164e28e4d652d3f9bef0608ba73ec3171e4bb44a67c1e7643086d9c919a8f56e5bb8", 0x94}, {&(0x7f0000001cc0)="834d152dfc491c1f2cc19971365178a6fa118087c7587beb0518f64719d1d871200634b5ec25e192955c077b3601b13453fa660ce5832e22995962836b843f58e115a9eb5bcd", 0x46}], 0x6, &(0x7f0000001dc0)=[{0x100, 0x10e, 0x6f7b, "6747b5a9bfe4c66a60574cdfdff5c808a02d76e249a576f3303cf604d88059b5ae9ce473e122548a565a1587fa6e2e04aac1b940ea7fc9bc29caa9cfb67796198fe23336d102898cbd6204e01256fc5e83ef2eb04c70d2caf34aa8ff04f65f1972959522dfac29babb4895f7f08f116ee33a3f4e27b0328f6ef9308b924fc0cb218f905072ee9e5503acf07f7dabe876e078880e9ff6fe81bdef6c6050668beaef47d2964b9e499117776ab7dcbdbca4e95f3d73155e6202c4c34fba3553b2e403aa704186ad4862498b18b401780223fd135d822d6e687a0c65b5e66a6f643efb79baef68d16cb3244862e996624b"}, {0x30, 0x113, 0x3f, "29837d1c4d958f213eae62f500c057f954c14b5993a0e8fb4fb4b73f54f992"}, {0x110, 0x10e, 0x9, "e00da7d73cd1d2c36a37bb1ce14866e81bffbc18ff5333efe9c62107aa23a25d2c3023bcee616c48e3b40563074f8589f62d7d884ec85fadad5616ef203a0210a82c11b6700bdcbbd9f122ae0ec0ff8d07d4c7dbf2dd52b4e05f4f2898158f2788f4173cec7740c3218c795b4e7164bc184256903a300dcd43400064d418fd97235c161f6e1357f40c17cd14c910ebfc185ab1e16babf4729ad50205081b1aadc6a7cd1684d744ce4161a7ee104eaa362aa99e71192c2cbd41df6846eff174d156523ecde05e73d7cafa0b7cbf91d83b1c1cd4750bac93706f2c64552e33c38cd10fe88f97374d25cc993c795629927500da9bfbd2d8811c19c64598b8df42"}, {0xb0, 0x0, 0x101, "48e4973d8f019141fbd2a2ddb7479959557544cbd16c5a589d2da93f8ebc8d043ecb0996859b00690cb0cb836e00d31b4d19b00f6a4f618ed4d52ea75576b5f744650384a8869c5c4eac74e45c158e9fbf9282a122e2922b21f17ad7c1e3e40910e1d8000ff1441ee1e6bb2db85a3a1c5c8e85426745a400b8941b4263caa1c4ef9384646e6aee4f60c86d184d54258a62a9ebef9726d215f977639c848408b8"}, {0x1010, 0xb965e7cac1c50a98, 0x80, "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"}, {0x1010, 0x52, 0xfffffffa, "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"}, {0xa8, 0x111, 0x1, "fe69c53507c9ce50228acd76238d65cbe41deddc8ea8f23c9d5b800b8b60dfb0201bcb27aaefd94b16d52d3425d30a7c7bed3c9ac1b74e1bfc774aee019a68ad790b375b00b7a5449bafa9ba1cf237372921f357061d839093edf559e7122eb11f5c7006c0d0e432b05a7524015cab53b5eec44ce5c9c8ec9a8d4a564c6880731b30eaeb72d9d219ce4b5703cd62ae5378"}], 0x23b8}}, {{&(0x7f0000004180)=@can={0x1d, r3}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004200)="c1ea2ec84f88198a5ddf4d241e9cd9a6b9c2977acae9328b97bdca01f8d41dadd8d66a95b593a956cff992ad6032bf0a1f8de7975eb35cb4a7a3d90895c417ab3e49d9e7ed01e9ac27b4d9fce3fb9cc4be5660e77abd803673238a8b8238cda622d1022e497aef39f496d30f3b4519cae70bec181349f27063043f5d296b6989962d13", 0x83}, {&(0x7f00000042c0)="09494fab72f2ce7fb5f49592c3be064fb533f540d962f37724", 0x19}], 0x2, &(0x7f0000004340)=[{0xd0, 0x9b36c8908c29e64c, 0x7fffffff, "dddbf77315cccafa514e08f6f6c63f4f47ff3dd1f6453dd017013c9313ea8d800fce604cbbd06b482aed96219379e7db123742b171d2e606fb72e38487087c5693546909473c0f140c4d71d33790df21371240b9f2671ddf518e7a68b164612551ee34a14b7544a07b32ec1cfc02bd9344d9ef014df8fb6bfc149b0fdee294cf2d331b2d0e85b66c332c44be330bcb3d9e5cfba074201ac737e45738687e35d65e3555a39579cf3e1a3e2f8a0104595e825dd5e3d91d48545012b421dd3e"}, {0xc8, 0x0, 0x0, "384df3426688ecbb9dad41a8df552d1866e21dbf82ec473f32ba99588329c5e283aefb9f7ec2f9bab841d1bbecf797cb24fd4375b836bcb83fa6987d79358779f943fe14aae5abdd26bf059bc7e5c9bdd1231e2e91ec9f9909da7d04b8c47c5c2cd3bb337cadb35e0bbdcbacaac05e2ed2dbac66985bad9c290c45cdba37edd406087aea50db4638ad497d682cb86f855c725a81070bf8f119b808728d45ddb1622677c9b3a48ce1dbf579fafaba445b02bd63"}, {0x48, 0x8d, 0x3, "fc0700d80db06286e0decfae57d1863b2af5edf4c156e35e7597b68e74eb4020052784ddbd1fd7ae8c3f5ccc64a8be1bf6"}, {0x20, 0x88, 0x8, "893e8b160abd9306a8dd"}], 0x200}}], 0x3, 0x40001)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0)
getpid()

[ 1069.302121] bridge0: port 3(team0) entered blocking state
[ 1069.355095] bridge0: port 3(team0) entered disabled state
11:03:53 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x88001)
write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7)
write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0)
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="017461636b203f6465762f646c14faf90305f979bc0a6403c54638c76d5f706c6f636b00"], 0x15)
r1 = socket(0xa, 0x1, 0x0)
close(r1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0xd2, 0x5, 0x3f, 0x7, 0xffffffffffffff38, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}, &(0x7f0000000140)=0x100)
r2 = socket(0x11, 0x3, 0x80)
setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4)
bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xc8800, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000), 0x4)
read(r5, &(0x7f0000000180)=""/19, 0xfffffe47)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r4, 0x0, 0xffffffff000)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={<r9=>0x0, r8, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x200, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x9, 0x902, 0xffffff56}, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xffff}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r10}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r9, r3, 0x0, 0x23, &(0x7f00000002c0)='mime_type^trustedppp0\'-proc/vmnet1\x00', r10}, 0x30)

11:03:53 executing program 3:
r0 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
r3 = fcntl$dupfd(r2, 0x0, r1)
r4 = fcntl$getown(0xffffffffffffffff, 0x9)
tkill(r4, 0x1c)
r5 = syz_open_procfs(r4, &(0x7f0000000040)='statm\x00')
ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e)

[ 1069.461113] device team0 entered promiscuous mode
[ 1069.472705] device team_slave_0 entered promiscuous mode
[ 1069.499551] device team_slave_1 entered promiscuous mode
[ 1069.526027] audit: type=1804 audit(1577271833.883:8988): pid=31853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/87/bus" dev="sda1" ino=17262 res=1
[ 1069.549467] bridge0: port 3(team0) entered blocking state
[ 1069.559766] bridge0: port 3(team0) entered forwarding state
[ 1069.631167] audit: type=1804 audit(1577271833.883:8989): pid=31853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/87/bus" dev="sda1" ino=17262 res=1
11:03:54 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x2a939, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0xffffdd86}]}]}, 0x24}}, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r7], 0x1)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={r7, 0x5}, 0x8)
write$cgroup_pid(r5, &(0x7f0000000300), 0x12)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001400)={[0x4, 0xfffffffffffffff8, 0x16ddf801, 0x6, 0xff, 0x8, 0x3, 0x0, 0x200, 0xfffffffffffffffd, 0xff, 0x0, 0xfffffffffffffff9, 0x8000000000000000, 0x9, 0x2], 0x1000, 0x40040})
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0xe9ff53660c9d7455, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"])
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
lstat(0x0, &(0x7f0000000300))
socket$inet6(0xa, 0x80000, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)

11:03:54 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
get_thread_area(&(0x7f00000001c0)={0x10000, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x1})
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x54000, 0x0)
r4 = dup2(r3, r2)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000000c0)=0xff, 0x2)
r5 = dup2(r1, r0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x1, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x7f})
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80200, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='\x00\x00\x00\x00\x19', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaac07, &(0x7f0000000180)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874ef1080000a7080300146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@nojournal_checksum='nojo\x02\x00\x00\x00\x00\x00\x00\x00ecksum'}]})

[ 1069.750883] audit: type=1804 audit(1577271833.963:8990): pid=31848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334902611/syzkaller.EBA3zd/87/bus" dev="sda1" ino=17262 res=1
[ 1069.884827] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1069.969140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:03:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00?\x00\x00\x00\x00\xff\x00', 0x1})

11:03:54 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x56)
write$cgroup_int(r1, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = getpid()
sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_rr_get_interval(r7, &(0x7f0000000140))
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0))
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x9, 0xb, 0x4, 0x634a91a846911c42, 0x72, {0x0, 0x2710}, {0x2, 0x2, 0x0, 0x54, 0x1, 0x6, "885bc8c6"}, 0x0, 0x7, @planes=&(0x7f0000000180)={0x3, 0x7, @fd=r4, 0x7}, 0x3f, 0x0, r0})
sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53)

11:03:54 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x2000000000000010, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='rS\xd5\xa5z')
sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000086b7e163f13cfb689b8fc2d8d3d19ee67f9505b524c58f9e80408c8fa086fefe130ad7947ec318a3e2e9da106f3de9987b8570e27cc6c0d67b76ebed22992afdc65aa294b353be89767cdc74f44651d62f1a2a6d4f5800c75108e9d68812f9f1b583f359d618021117a23e0313925bb8f14b", @ANYRES16=r8, @ANYBLOB="0305000000000000000008000000"], 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000cdb0eb9f1c43ae2a507a4b8e8aa50dbcfacecb8bf48970dafa3afbaae1e7", @ANYRES16=r8, @ANYBLOB="020029bd7000fddbdf250f0000000800050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r8, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x112f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
r9 = socket(0x10, 0x2, 0xc)
write(r9, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:54 executing program 5:
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getuid()
lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000380))
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="c8575f8f685f9196a27c726606", @ANYRESOCT, @ANYRESDEC])
getgroups(0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

[ 1070.157080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1070.205425] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1070.227876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1070.242658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46982 sclass=netlink_route_socket pig=31870 comm=syz-executor.4
[ 1070.300160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45261 sclass=netlink_route_socket pig=31878 comm=syz-executor.4
[ 1070.346976] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = dup(r0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=""/168, 0xa8)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000034218c99d9f7a22a0000000000000000000000000000009142400000004f0000000000"], 0x58}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000002a00210400"/20, @ANYRES32=r7, @ANYBLOB="ac0c0000000000000000007c0c0080eb8600000075700000200002001c0003000500000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afbd2c1df41944400193878e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f00000000000000000000000000000000358a7035a4b3df0f32e320b9e0ac18265cfa715d8b769bd69b3a3bec66718fe4e0d066222a00b54caaaaacfb6876a5271b01382dbff84fdab789336ad4"], 0x50}}, 0x0)
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r13 = dup2(r12, r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000440)={r13, r3, 0x800, 0x3b, &(0x7f0000000400)="595242729535ff539f7ffcdc32e222a32b253a93210893a4a9400ea3ad23513da0b33d939d668f2195a10c47a03cc59444f103ef888189d54f20e0", 0x17, 0x81, 0x9, 0x7f, 0x0, 0x4, 0x2, 'syz1\x00'})

11:03:55 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='neu/arp\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'netpci0\x00', 0xca05})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=<r3=>0x0)
accept4$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000200)=0xfffffffffffffee4, 0x81000)
ioctl$TUNSETOWNER(r2, 0x400454cc, r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0}, 0x6c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r5, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r5, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r5, @in={{0x2, 0x4e21, @remote}}, [0x4, 0x7a, 0x5, 0x1c000000000, 0xa1, 0x80, 0x10000, 0x1, 0x40000000000000, 0x200, 0x100000001, 0x1, 0x81, 0x959, 0x7]}, &(0x7f0000000280)=0x100)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000100)=""/103, 0x67}], 0x2)
syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00')
r6 = socket$inet(0x2, 0xa, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2)
sendfile(r1, r0, 0x0, 0x20080000000)

11:03:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00@\x00\x00\x00\x00\xff\x00', 0x1})

11:03:55 executing program 5:
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "5ab56fb39990e56b194de0ae4530000000003384"}, 0x277, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7)
open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8800)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080))

[ 1070.941241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1071.072641] audit: type=1804 audit(1577271835.433:8991): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir728681196/syzkaller.RkuFJo/4/bus" dev="sda1" ino=17025 res=1
[ 1071.104714] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:03:55 executing program 3:
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410a20, 0x76baa5b8b6465126)
r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x70, 0x0, &(0x7f0000000440)=[@exit_looper, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r4}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/191, 0xbf, 0x0, 0x29}, @fda={0x66646185, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}], 0x7c, 0x0, &(0x7f00000004c0)="8e4098ebd2e567a0ac71d06abdb1db243fa28398d521ee466481e1bea9691fdb6189f484a96f7fa01761496e8416296048d5b17e7d5d8e530efb4dda768d85e3ccec02ff45f98e2ecd71d5fa7ea335b5adf1fcef4eac98805e6202701344b8111c38fe826f7ef84ad9b9a435f9b35378dd4dd9437837593e2c287c23"})
open$dir(&(0x7f0000000240)='./file0\x00', 0x91080, 0x0)

11:03:55 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080))

[ 1071.164890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1071.211369] audit: type=1804 audit(1577271835.463:8992): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir728681196/syzkaller.RkuFJo/4/bus" dev="sda1" ino=17025 res=1
[ 1071.825283] openvswitch: netlink: Missing key (keys=40, expected=100)
11:03:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001ffff001000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES16=r3], 0x3}, 0x1, 0x0, 0x0, 0x2c008}, 0x838e2979bdde64de)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x14000, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x7fff)
fgetxattr(r2, &(0x7f0000000140)=@random={'security.', 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}, &(0x7f0000000180)=""/57, 0x39)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000000))

11:03:56 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
socket(0x10, 0x2, 0xc)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000001c0)={0x80000001, 0x4, 0x1, 0x80000001, 0x10, 0xfffffffffffffff7})
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0xa0b}, 0x1c}}, 0x20040000)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0x4004)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x7}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:56 executing program 3:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='ti e_offset=0x0000000000000600,\x00'])

11:03:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00`\x00\x00\x00\x00\xff\x00', 0x1})

11:03:56 executing program 0:
open(0x0, 0x200, 0x80)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r0, 0x10001)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

11:03:56 executing program 2:
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
geteuid()
io_submit(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
lstat(0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
getpid()
io_submit(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
lstat(0x0, 0x0)
io_setup(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
io_setup(0x3, &(0x7f00000001c0))
io_submit(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='\x80group.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000004c0), 0x12)

[ 1072.107775] syz-executor.2 (31862) used greatest stack depth: 21168 bytes left
[ 1072.172428] FAT-fs (loop3): Unrecognized mount option "ti e_offset=0x0000000000000600" or missing value
[ 1072.186194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1072.222827] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1072.229747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:56 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
ptrace$peekuser(0x3, 0x0, 0x1)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000d9c701000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff00"/192])
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='tmpfs\x00'], &(0x7f0000000600)=[&(0x7f0000000380)='/dev/rtc0\x00', &(0x7f00000003c0)='/dev/rtc0\x00', &(0x7f0000000440)='eth1\'\x00', &(0x7f0000000480)='tmpfs\x00', &(0x7f00000005c0)='/dev/rtc0\x00'], 0x800)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x0, 0x3, [0x0, 0x6, 0x2]}, &(0x7f0000000200)=0xe)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getpeername(r5, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000580))
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x2)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x3f, 0x0, 0x7}, {0x2000000, 0x0, 0x80000001}]})
mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ustat(0x0, &(0x7f0000000080))
futimesat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={{0x0, 0x2710}})
setns(r5, 0x20000)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x19, 0x6, 0x80}})

11:03:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x2, 0x3, {0xa, 0x4e22, 0x5, @mcast2, 0x5}}}, 0x80)
recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)

11:03:57 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0), 0xa9, 0x0)

11:03:57 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
ptrace$peekuser(0x3, 0x0, 0x1)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000d9c701000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff00"/192])
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='tmpfs\x00'], &(0x7f0000000600)=[&(0x7f0000000380)='/dev/rtc0\x00', &(0x7f00000003c0)='/dev/rtc0\x00', &(0x7f0000000440)='eth1\'\x00', &(0x7f0000000480)='tmpfs\x00', &(0x7f00000005c0)='/dev/rtc0\x00'], 0x800)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x0, 0x3, [0x0, 0x6, 0x2]}, &(0x7f0000000200)=0xe)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getpeername(r5, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000580))
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x2)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, [], [{0x3f, 0x0, 0x7}, {0x2000000, 0x0, 0x80000001}]})
mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ustat(0x0, &(0x7f0000000080))
futimesat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={{0x0, 0x2710}})
setns(r5, 0x20000)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x19, 0x6, 0x80}})

11:03:57 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
lseek(0xffffffffffffffff, 0xc46, 0x2)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES32=r7, @ANYRES64=r9], 0x12)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:03:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x03\x98\x00\x00\x00\x00\xff\x00', 0x1})

[ 1073.128883] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:57 executing program 2:
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3df294c78b27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc673fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/141], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

[ 1073.215504] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1073.266387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1073.288937] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1073.308592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:57 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
sendmsg(r3, &(0x7f00000016c0)={&(0x7f0000000140)=@ipx={0x4, 0x5, 0x5e19, "849dbba0e8a3", 0x40}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000001c0)="c6fddf99a9a6ffbfda437a149d21f161de9f0cf252f606f51b8b5a209db7f691bad64d7d345d4a7c7c2fa4d52af58f15dae437a2d604b9a8c14709f08f0d30cdc365cab48d2893ef84f584db0b8ed07863f828c59b3d4b95fd8b9d133b03fd588665d1ad2773dc5cb70f090f93157620121e3fe0457c6d12afe16d1f16fb9541eeaeb63d0a492e3304e4de727307eaaef081612f63ccb42fd11402547094cb1df657c5a680c8fa02cf3f06dd58f4cae554d27a471761a28b92", 0xb9}], 0x2, &(0x7f00000012c0)=[{0xa0, 0x11, 0xe2d7, "2252b0a82bbf58c9430b0a1b1760293e9d38e9dea0bdfdcab4a1c677a67c4176fa5489b8bf428fab32180baa9d08928f3867a332e6b7d77c816e5630a57fd869569b60b234d706a6af99e3da446d6dd9d5640023d5a0b5303b3aa8cba27c136b28e15082f45577456c57cf13a32012409f1eb44e43b05fa622b7c69a8b7020c205d60eae0a6645971bc8e8119e1ce3b6"}, {0xe0, 0x10f, 0x401, "f130c3c2e63dc98240c48d1a286d90928b214915e7b6d75cc0be0277dfe21a60e3915e9bff963a6c659621d988b4f9cc48144076796ede39540f6bd0244e661c34df5f52292b34a09e74948f9cb842bad557a0b560873db9aaf856ccd3f169116226660f1354788fa7f558294a57b582839bcc9d71ce9a6474a4945378be1e2368ce5509dab73186cfe6b1a3f3f123742ee639b7aee9d1720e05a68fe457ae875dc6708251bd07e56ce5e093db01f8cb1e805dd6a9e9a29555357004a69a54ed937083360e8fea60abc0"}, {0xc8, 0x110, 0x1ff, "e6fc438f0cb6d9df0c19febd2c7c972ca51c77cd86a9cdf5338e39a65e1d1afcba8168d0632431c46fe8d0785f5ecb23b131ac59045ba091e1d7c00cbc1de283f5bf13fa9adb975dcada0e0851edea12ab67729aa33919b6e7d309a4d9678c8fa36b3928fcec8d15dd8dbccc0ac55285fdaeb1b7079396c08cb2b2316afd65642e31f825da653dc42c1f178d66aac4f49db3d9bd1795ac186ed7231107d32e2a4f0dd196a40f6655a1e3b5887fab0fe4d685"}, {0x70, 0x6, 0xdf8, "4a4cfda3c53e764974ba1e77fe25409507de9c5862d721d6fbb95012f01ab274098c5448228c97656ed8f834fc107f285a92ce55adffb410b0b56c4ebcaf216ff76d8b1ea88b6887d346388dfeeb98f2206aa63fd33b3ecee589a922914c"}, {0x38, 0x100, 0x0, "26d90e110fb5b97aaeee596f7612be159eb3563e5235c3cc4686d1628a3f95485c8354d3"}, {0x110, 0x2c5cd40613fac9a1, 0xffff8001, "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"}], 0x400}, 0x48050)
listen(r0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x1c0)
sendto$inet6(r4, 0x0, 0x0, 0x20040000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
prlimit64(r5, 0x7, &(0x7f0000000000)={0x8, 0x1}, &(0x7f0000000080))

11:03:57 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000180)={0x2, 0x0, "788f40e39bed691b838914f42a8c54d93bdfe601e82a34982fe49abf718a01f1ea0129113346cc881680de12662976eadaa8689485df6e75a6ce3cb235d1a79a3092209c0c1bbaa3600acfc777949ad014432b600eee8ade0e5c0ce69caf6766fe110168714905c7423e84b43bb258fc35adccee469e4673237ea539f6112445f2e042850a475c1b802cb082a62756e3a1a8cd534c6fc6c97a2cc78a35fb23c85b4ed30c97f53d73d992d3069e793bb319b3e88de348995a04b776c9a3e6002809a2bdafc34e320ddc66787b1ffca74345b566cbfe0c73473da7f00f16401ecc22f3c321cbb3374b04e67d17cc840bc5bb02b4fc751700eaef003930ae38d2ac"})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe4, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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")

[ 1073.419830] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1073.442028] audit: type=1400 audit(1577271837.803:8993): avc:  denied  { getrlimit } for  pid=31977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1
11:03:57 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c)
sendmmsg(r1, &(0x7f0000005fc0), 0xa9, 0x0)

[ 1073.472395] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1073.498344] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1073.578713] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:03:58 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000180))
io_setup(0xc0, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x20000000000001e5, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x3}])
r5 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000fd7000))
r6 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x40)
ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000140)=""/9)
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r7 = getpid()
sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r8 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r13 = dup2(r12, r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r13, 0x0, 0x3e, &(0x7f00000001c0)='queue1\x00\x00=Q\xebv0\xff\a\x00\x00\x00\x00\x00\x00;\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xccv\xc4\xb5Ez\xdb\xc3\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff}, 0x30)
r14 = getpid()
sched_setattr(r14, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000}, 0x0)
r15 = getpid()
sched_setattr(r15, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
tkill(r5, 0x3a)
r16 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0)
dup2(r16, r0)

11:03:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}})

11:03:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x1fd)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

11:03:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\xfd\x00\x00\x00\x00\xff\x00', 0x1})

11:03:58 executing program 2:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x10)
r5 = memfd_create(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x7})
kcmp(0x0, r3, 0x5, r4, r6)
r7 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r8)
r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r9, 0x200004)
sendfile(r8, r9, 0x0, 0x80003f000002)

11:03:58 executing program 3:
socket(0x200000000010, 0x5, 0x0)
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f00000012c0), 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00')
r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000540)=""/197, &(0x7f0000000400)=0xffc4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000540)=""/197, &(0x7f0000000400)=0xffc4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000540)=""/197, &(0x7f0000000400)=0xffc4)
sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0xe, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR, @ANYRESHEX=r4, @ANYRESDEC=r5]], @ANYBLOB="00000033a900e92c"], @ANYBLOB="f500000000000010000000000000000000000000000000004800000000000000140100000100"/96], 0x90, 0x800}, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r6, @ANYBLOB="01111fbd869cc1243aae620d28d3adf30ad7c3ddb6827e0c00099dda26a1b420e6000000000000000000000000000000c11bc875257e57560dc609e9f65e7bb50bb6138f052add5028cbe69b937425cdebf86c7ba049c2728c589addc2981256adf0b80fed2274552bf67b891fec849c3f1c15882ab3a27da5cefb7ac747442ac49d07cd"], 0x3}}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
r7 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
r8 = getpid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="12a60ea49b4bee9a99625fe6808eee7fa7b7a4708af062fe749f232302000000010100007e4642addf4eda529110202b420c6f9623bc0689651b15c944d8d5382155b74ff7128d8db13125cda9084aa97656", @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRESHEX=r8], 0x5, 0x1)
capget(&(0x7f00000001c0)={0x19980330, r8}, &(0x7f0000000240)={0x6, 0x7ff, 0xe2, 0x7, 0xd5, 0x2})
ptrace$getregset(0x4204, r8, 0x6, &(0x7f00000003c0)={&(0x7f00000013c0)=""/4096, 0x1000})
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000800)={0x2, 0x0, @pic={0xff, 0xc, 0xfc, 0x1, 0x3, 0x1, 0xc6, 0x81, 0x0, 0x63, 0x3, 0x1, 0x8, 0x0, 0x1a, 0x45}})
request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x5, 0x9b, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCNOTTY(r9, 0x5422)

11:03:58 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000040)={0xf000000, 0x4c3, 0x7, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980929, 0xc49f, [], @ptr=0x5}})
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r8, r7)
dup(r7)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcsu\x00', 0x0, 0x0)
statx(r12, &(0x7f0000000080)='./file0\x00', 0x573e6029a68c384f, 0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000000c0)={0x7, 0x4, {r6}, {r13}, 0x200, 0xffffffff})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r14)
r15 = socket(0x10, 0x2, 0xc)
write(r15, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r14, 0x0, 0x4ffe0, 0x0)

[ 1074.481717] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1074.535611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1074.568211] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1074.572597] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:03:59 executing program 5:
r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000b40)={'syz_tun\x00', 0x104f6c434a73aca9})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x7467, 0x3, 0x4, 0x7cc2}, {0x6, 0xfc, 0x4, 0x7}, {0x8000, 0xf5, 0x1, 0x3f}, {0x15e, 0x40, 0x6, 0x1ff}, {0x4, 0x3f, 0x1f, 0x1}, {0xad, 0x0, 0x40, 0x3}, {0x7ff, 0x1f, 0x5, 0x6}, {0x81fa, 0xfe, 0x7, 0x1f}, {0x3, 0x3, 0x1f, 0xfffffff8}, {0x8001, 0x20, 0x2, 0x800}]})

11:03:59 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f00000000c0)='/dev/me\x18\r\xea\xde\xe3', 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x408100, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7fffffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2800c014)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f00000005c0))
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r10 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xffffffffffffff49)

[ 1074.620838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:03:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r10 = dup(r9)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x9, 0x7, 0x964, 0x4, 0x6, "73baddbd689951ab8c0f3200600329dd7745b6", 0x5, 0x100})
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
syz_mount_image$reiserfs(&(0x7f0000000400)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="636f6d6d69743d99f4dfcfa000c15d4952ea9206253078303030303d30303030303030303030302c007f214f8a4414f94341b58a91c3a9c5af12626be60fc6d00070c8"])

11:03:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200a21, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x40, 0x6, 0x4, 0x4000, 0x3f1, {0x77359400}, {0x0, 0x8, 0x9, 0xff, 0x6, 0xf8, "a0b42491"}, 0xffffffff, 0x4, @planes=&(0x7f00000002c0)={0x3, 0x0, @fd=r5, 0x9}, 0xffffff80, 0x0, <r6=>0xffffffffffffffff})
ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x6)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$TIOCGSERIAL(r8, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/126})
ioctl$TIOCSTI(r1, 0x5412, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
sendto$inet6(r9, &(0x7f00000000c0)="2fdfcb49196891edbc0d419910d0a788db7a0f0058568b361a4133827b95f9193c1389d52b8a049a02bee1ab51b94782aa4ce60fbe4cff3c3e4f46c40936f20e5fd304b0052924ed1bbb5c45fbb37da08ff015ae7da5d5875dc57b3cde99e7b2d176bce618d5c2a39b794068b46e28", 0xffffffffffffff36, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c)
shutdown(r0, 0x0)

11:03:59 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
syz_open_procfs(r2, &(0x7f0000000140)='syscall\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0x20000, 0x800, 0xfffffffe}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080), 0x4)
r4 = socket(0x0, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100), &(0x7f00000002c0)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300), 0x12)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
io_setup(0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
lchown(&(0x7f0000000280)='./control\x00', 0x0, 0x0)
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180))

[ 1074.998093] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
11:03:59 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x200000, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, r1})
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_read_part_table(0x0, 0xb8e72df2fdafac8, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f00000000000000000005000000aa00"/64, 0x40, 0x1c0}])
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x12003, 0x0)
write$selinux_attr(r2, &(0x7f00000000c0)='system_u::bject_r:init_exec_t:s0\x00', 0x12)

11:03:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\xfe\x00\x00\x00\x00\xff\x00', 0x1})

11:03:59 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000000}, 0x14f}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
mlock(&(0x7f0000fea000/0x13000)=nil, 0x13000)
mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40a601, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x4f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cea", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$inet(0x2, 0x0, 0x0)

11:03:59 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x51000, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000001a005f0023b3f40700090400020000000010000000ff0000080001007f000001", 0x24)

[ 1075.302788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1075.336984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:03:59 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)="fc0000004a000f04ab092500090007000aab80ff01000000000036", 0xffffffffffffffda)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0)
close(r2)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r6 = socket(0x10, 0x2, 0xc)
write(r6, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1075.355020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1075.444789] SELinux:  Context system_u::bject_r: is not valid (left unmapped).
11:03:59 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3a)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x248100, 0x0)
write$P9_RAUTH(r1, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x4, 0x4, 0x4}}, 0x14)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1}, 0xc)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000100)={0x3, 0x6, 0x4, 0x0, 0x3ff, {0x77359400}, {0x0, 0x0, 0x0, 0x3f, 0x6, 0x40, "3b817ee6"}, 0x1000, 0x1, @planes=&(0x7f0000000040)={0x7fff, 0x3f, @mem_offset, 0x5}, 0xfffffffc, 0x0, <r5=>0xffffffffffffffff})
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000080))
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000000), 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 1075.521917] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:03:59 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
socket(0x1, 0x3, 0xff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x500004}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="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"], 0x250}}, 0x20)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xfffffeb5, 0x1, [@TIPC_NLA_BEARER_NAME={0x15e, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}]}, 0x28}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'veth1_to_bond\x00', <r8=>r7})
accept(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
sendto$inet6(r9, &(0x7f0000000140)="fb9b1755a6a2f7f892528ce38195a9420eb21a3632b8deeabaf3f98870caeb58c8b7", 0x22, 0x40, &(0x7f0000000340)={0xa, 0x4e21, 0x9, @rand_addr="c26f1fc38409efa30a2ec53cad8b2429", 0x80000001}, 0x1c)
sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@newqdisc={0x50, 0x24, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0xffff}, {0x2, 0x7}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8, 0x2, 0x800}}, @TCA_RATE={0x8, 0x5, {0x9, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x50}}, 0x84)

[ 1075.629699] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1075.687138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
11:04:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x01\x00\x00\xff\x00', 0x1})

11:04:00 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="636b36538f866ec887088a2f74462b2ab483505b45227f3f5ed57a4dc02dc99e513ded2bf7954eae10100dadcd711c87cee4c52be4a70f035cbfcbddc851df5094c1d2068b6381d358a395c8e42c0a4fddf910789c4fc04ea202fb5eb73bc77f91322a", 0x63}, {&(0x7f0000000180)="9d9c1be928850e77e72e55e6b5f8ed4f0ecdd1a48793360a37debdc382fb5a3ddfe252c416bc42b56909f7893837b83c1b21b7095a1e463ba5e826a1218a7bd2a6bba0bade65bba196cd1e6c98c511508da89728849a0a0c682cc6dcd2c511fe7f319ac9194ec68c53dfaa64ff421e1fddd85990f193c4843c1d88e3a8427e164a4838b7e4b2d2348e1857273daff33dbb26485814e9eb21bde1410e0c8fc22c72ce9918cab0e7c720f101aca8eac87ca5626ede", 0xb4}, {&(0x7f0000000240)="38ec675a4eb64b95688e5b07da67dedde0c384aacf469048ee0a97e4e280ab0d41097500cea6456cfc018509fb821a778a91f8499da9ea6ef66de954a1be6207a391d49431ebb6ab4020459eb018fc659eec0414ab6d5255e0f99d631dfa2296ff8dbaf2b2a42347955dc4c165484cde08b0ad697b79", 0x76}, {&(0x7f00000000c0)="dd281f474b519d47100effcd72cfe1321aff88063558353d123547c463bd0d462099bd76aec7b549", 0x28}], 0x4)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[ 1076.363027] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1076.439191] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1076.522501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1076.533354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1076.553987] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
11:04:00 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_init()
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000140))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="2ed19fda29b800008ed8b859068ee8ba6100edf30f01da660f78c50b2866b8002000000f23c80f21f86635080030000f23f80f001a3e0f01cb66b9800000c00f326635000100000f30", 0x49}], 0x1, 0x4c, &(0x7f0000000240)=[@cstype3={0x5, 0xd}], 0x1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = semget(0x1, 0x1, 0x80)
semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000640)=""/249)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
mq_timedsend(r8, &(0x7f00000003c0)="e751257988a555b13e4560991499602abcaa7a2386197b30cde96b4ea7d7a88e", 0x20, 0x20, &(0x7f0000000400))
r9 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000340)={0x9b0000, 0x5, 0x80000001, <r10=>0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9e0905, 0x2, [], @p_u32=&(0x7f00000002c0)=0x8}})
setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000380), 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1076.568675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:04:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x02\x00\x00\xff\x00', 0x1})

[ 1077.119521] EXT4-fs (loop0): Unrecognized mount option "" or missing value
[ 1077.136573] EXT4-fs (loop0): failed to parse options in superblock: 
[ 1077.166723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support!
[ 1077.216625] EXT4-fs (loop0): bad geometry: block count 580964351930795064 exceeds size of device (66048 blocks)
11:04:01 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_S390_UCAS_MAP(r6, 0x4018ae50, &(0x7f0000000100)={0xfffffffffffffffd, 0x1f, 0xfffffffffffffffb})
bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @multicast1}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4)
dup2(r2, r3)

11:04:01 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000012ffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12])
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r9, r8, 0x0, 0x209)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r10, &(0x7f0000000000), 0x43578cf5)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r11, 0x1ff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000100)={r11, 0x9}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x1000, 0x3ff, 0x0, 0x8, 0x4, 0x100, 0x1, 0x80, r11}, &(0x7f0000000140)=0x20)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

11:04:01 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20d, 0x100)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'bond_slave_1\x00'}})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r3)
r4 = socket(0x10, 0x2, 0xc)
write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000080))

11:04:01 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x8000})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
write$P9_RRENAME(r2, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7)
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000700)="032ca30848cabd14d77c0b68028122c4ee06b41d501b0f85cd187030b8744b4d744a1148fedd9b7fcbd65941650f4e03970d5805f9aadcbf237345a9b6ee7f7069c5", 0x42}], 0x1, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x200)
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000030000000100000002", 0xffb8, 0x1400}], 0x0, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0)
fcntl$setlease(r6, 0x400, 0x4)

[ 1077.359693] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1077.391913] f2fs_msg: 6 callbacks suppressed
[ 1077.391928] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1077.435849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1077.440035] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1077.446880] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1077.466999] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1077.474033] F2FS-fs (loop5): Insane cp_payload (50537 > 510)
[ 1077.480397] protocol 88fb is buggy, dev hsr_slave_0
[ 1077.485545] protocol 88fb is buggy, dev hsr_slave_1
[ 1077.491819] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 1077.501044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:04:01 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_init()
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000140))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="2ed19fda29b800008ed8b859068ee8ba6100edf30f01da660f78c50b2866b8002000000f23c80f21f86635080030000f23f80f001a3e0f01cb66b9800000c00f326635000100000f30", 0x49}], 0x1, 0x4c, &(0x7f0000000240)=[@cstype3={0x5, 0xd}], 0x1)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = semget(0x1, 0x1, 0x80)
semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000640)=""/249)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
mq_timedsend(r8, &(0x7f00000003c0)="e751257988a555b13e4560991499602abcaa7a2386197b30cde96b4ea7d7a88e", 0x20, 0x20, &(0x7f0000000400))
r9 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000340)={0x9b0000, 0x5, 0x80000001, <r10=>0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9e0905, 0x2, [], @p_u32=&(0x7f00000002c0)=0x8}})
setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000380), 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1077.543088] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1077.562920] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1077.583266] F2FS-fs (loop5): Insane cp_payload (50537 > 510)
[ 1077.602068] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 1077.817860] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1077.831447] EXT4-fs (loop0): Unrecognized mount option "" or missing value
[ 1077.836950] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1077.859446] EXT4-fs (loop0): failed to parse options in superblock: 
11:04:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x03\x00\x00\xff\x00', 0x1})

11:04:02 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
sendto$inet6(r5, &(0x7f0000000100)="05030e0040063e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x50, 0x0, 0x0, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)="26607d96ebec7dcd16595fde79436a00850c552c1ee4ceb947b483cf1b16947a7e022f32d07ae3769af3e77a8e65461c9363fddfa781110271304b4e7f6b28b6f43a875d5e1eda4540af650761ab5507bb9523ce661caff9effecd0a1b6af1a38342b90f6a7dd70359d0b57cc658f0ee86e2e7c60484c56516e52d0a80950953da696c1c2204c4d4a0adeb7e6a078eb2231cb5fb10a86ebf9a80ce544e51afdb89ca51f5b148a78951e0b0c22710178cf17dcbf64dcb231d6e94f468033da662098c62a8432138fbae284f29009fb96fb6d61ec389530367b997464e667961482ede87f29787aa9c411fb55e11f94d90287518f989d71fcb", 0xf8}, {&(0x7f0000000580)="63f9d5effa3bc1518746796d8ed90521fbe284d9b5b13136e60bd2fef7a5675e549e279d10c13dd7016edc02db356b913c1ab97da34ed30594ab67931ff0206cebab5bcc4f4956746f1779ed58f83c84a78cc1b8db47e9581df8f94a4504ab1b1bda46d423c7cf22de6c5a00c015108c5c9a73e173c32be9c7fd602757a6d7de665e47f81bd7416ce6c2e4167ab027efac0711c61c9c3fbe02aa6e52bfd86d2769a66645da59254d9868de07aaa272ae911df24b3f4045cd47f48c5a97e08949dc784b793f8b9462a7cddaf77af316", 0xcf}], 0x2, &(0x7f00000006c0)="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", 0x1000, 0x1}, 0x1)
r12 = openat(r11, &(0x7f00000001c0)='./file0\x00', 0x414000, 0x40)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={<r13=>0x0, 0xfff}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000340)={r13, @in={{0x2, 0x4e22, @remote}}, 0x101, 0xfffa, 0x7, 0x0, 0x8, 0x5, 0x1f}, &(0x7f0000000400)=0x9c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
openat$cgroup_ro(r8, &(0x7f0000000080)='gpuset.ebfectI\xdf\x7f\xad\b\xe3\xf7\\j', 0x0, 0x0)
clock_getres(0x7, &(0x7f0000000180))

[ 1077.908681] EXT4-fs (loop0): bad geometry: block count 580964351930795064 exceeds size of device (66048 blocks)
11:04:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1500}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8,\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0)
inotify_init1(0x80800)
write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0)
r5 = socket$inet6(0xa, 0x400000000803, 0x5f)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000000c0)=0x2, 0x4)
r6 = open(&(0x7f0000000100)='./file1\x00', 0x14f642, 0x0)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d0)

[ 1078.040981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
11:04:02 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="000500000000000061104c00000000003d0500000000000095000000000000002252c9dac6e2fff95a04108ba80d54d682a55e82784429087b31d103e2ef2f0f2d1017cd844fa2ffb7689d2988a341f7e103b01d79aaed6b3466b303c47e3d96eb639c6b2fd3908010149522a248041c0eb86b947dff42c667042ffc0dfea0edd624eb70567a438f4795f09efb1f15815970ecbcc0dfca2075a1521741ae8bab13366d128c1e2bf5de306fd740dd1f1103657f96e20c3c6abad563c627c26a473c3352b5815b55181aa335a4eb0e7fce"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48)

11:04:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0)

[ 1078.081243] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1078.087470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
11:04:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r3, r2)
fcntl$getown(r2, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000508000a0080292055659d75e05d19892e04672db88bebf5e395ffd62b7e7216410dd6d3978d304f7003690ef64132b912db66515316a0da538f57cd078a956e07e16f93abc0f7a147bd7f8ce8757359cd1076b38c277208e34a8076ac88dffb1ce4a8520000000000000000", @ANYRES32=0x6, @ANYBLOB="1800120008000100677265000c00020008000700ffffffff"], 0x40}}, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x2080, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0xbb8f8d7d50aa55ba, [], "24e3ed43fa8fb00cd108450c3dfb08e8"})

[ 1078.326603] audit: type=1800 audit(1577271842.653:8994): pid=32179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=16696 res=0
[ 1078.341800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
11:04:02 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x7)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:04:03 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
recvfrom(r2, &(0x7f0000000340)=""/206, 0xce, 0x101a1, &(0x7f00000001c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x80)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x100000, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0)
getpid()
eventfd(0x7)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$isdn(0x22, 0x3, 0x26)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c)
listen(r5, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="743da4cc7dda9eab7f6f0000", @ANYRES32=0x0, @ANYBLOB="451c0400000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r8 = accept(r5, 0x0, 0x0)
write(r7, &(0x7f0000000100), 0x1ede5)
shutdown(r7, 0x2)
sendto$packet(r8, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mISDNtimer\x00', 0x0, 0x0)

11:04:03 executing program 2:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10)
connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f3eb2b080000000000e0a984"], 0xc)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x83, 0x0, 0x0, 0x0, 0xfffffffffffffe1a}, 0x20)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x110100, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000100))

[ 1078.816962] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1078.990337] audit: type=1800 audit(1577271843.333:8995): pid=32178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=16696 res=0
[ 1079.076429] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1079.105641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55933 sclass=netlink_route_socket pig=32191 comm=syz-executor.0
11:04:03 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0)
write$P9_RRENAMEAT(r1, &(0x7f0000000300)={0x7, 0x4b, 0x2}, 0x7)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x30, r2, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000080)={0x0, 0x89d8, 0x1, 0x98d})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10)
r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x6a3c2, 0x0, 0xc14d1dc1436ad704)

11:04:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x04\x00\x00\xff\x00', 0x1})

11:04:03 executing program 3:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@codepage={'codepage', 0x3d, 'iso8859-5'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x800)

11:04:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@null='               \x00', 0x9, 'rose0\x00'})
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0a4800002a000535d25a80648c63940d0324fc60100004400a000000053582c137153e370935098000f01700d1bd", 0x2e}], 0x1}, 0x0)

[ 1079.547379] hfs: can't find a HFS filesystem on dev loop3
[ 1079.558007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55933 sclass=netlink_route_socket pig=32191 comm=syz-executor.0
11:04:04 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r5, r4)
write(r4, &(0x7f0000000180)="6dd3536cf2e55a466b4ca21b4db2b969f29802840d0e7da21ea76082e02b4507c052fa611ec9ba078c369283af3bd9ae143667d02b4c60524559a94a610b5324a3c6f189dd659d183dc2cf953d56fd062904c7e4dc9f1c451bb899a468b5d4965e5dc36eb5be33a3d9b02c6d9ba5551feefe51b19bed3965", 0x78)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@loopback, @multicast2, @multicast2}, &(0x7f00000002c0)=0xc)
close(r0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dend/seq\x00', 0x0, 0x10080)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r11 = dup2(r10, r9)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
fcntl$F_SET_FILE_RW_HINT(r11, 0x40e, &(0x7f0000000300)=0x1)
write$P9_RCLUNK(r8, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7)

[ 1079.636785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
11:04:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r2}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1e, "8c68a4f647bf62c5eda3f1c3be45596726616ee22d0ad50deda0f4cc583a"}, &(0x7f0000000580)=0x26)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000ba00af61d500004b4d6c61ca7fb8d88fff7123d1b9e2562f42836a8985e6ac029c7115de977661f671cb7a44f448b5383beaf8ab5543e6d803b78f995990bf056713bbfb835505369366b519febde692576ecf702d2cffafb27a54fe08b4d666eead55c6145a9c2233d451fac64029cdc5a3cd1acf97fabeeee44fc49e2d74e52cfef90174d02a5035327894c9a5a312fed2e7cd8b3c4a7474b13e7e1c6d7083fd8309dfe28d1dd87c6200a2a1ff4951586020fdf9b4ba10f151b9b4ba7c266ea555d6a3ed4599a0aba4c12c6c66faa4322746f1096de4418110c6"], 0xc2)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1079.706092] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1079.723727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1079.737361] hfs: can't find a HFS filesystem on dev loop3
[ 1079.748330] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
11:04:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
sendto$inet6(r2, &(0x7f0000000280)="945af4b32b7907829435253afeb9b835b7ef9100c063801e15ac0a5636c4b7d7f5ac051ae3032751df4f18e1145d4201b7c23daa3cc4009e144458252165b626a6027e25291b80d774c0f127995a3985bb84a785cccc407b0c23487d30afaaaccf4fbe2dd406d8ed3aca467b23038dac91b0790db6f1858e0c601bc960fd574edbd7ee1d69e42879908af6473e7ea7e6011dd0ba35e1a0ce0f46341f3b30a5f8625ea34a8022", 0xa6, 0x8000, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @rand_addr="a7675c900827d65d11d45812b89b01e9", 0x4}, 0x1c)
socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000005c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00\x00\x00\x00\x00\x00\xa6\x11z\xe7\xe8\xeeJr\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\'\x00'}})
r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$reject(0x13, r4, 0xfffffffffffffffc, 0x24, r5)

11:04:04 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
gettid()
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
capset(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x101, 0xfffffff7, 0x1ebd7061, 0x101, 0xffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff0000400e630677fbac141414e934a0a662079f4b4d2f87e5feca6aab840213e0325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0072646d61202b6d656d0cb3991540bdbf6cca280ad0c2f6a1af96b4647f0967e54cdecfadcd37ec4fcfdbfd2f5042aaaef026b09e9cb1a409eddab70256d36d4e5c3b1041f63833a09f26b632b6d51c54589b8cc8f69d98e61186c3fb4dbb7569dc3f272048cb02b0cf6619632b06aa07cf34b1ad10a163c83aa480669ec6fd18ee0e8e52ed7005f0ad52eaa5b9e1c5b902a1726326ed19ae24994c1b8efd3f74804aed8d0a36971f660a990d447134d0bd99c430ed2cf264cbb1a0b94ce447ede60da052c6900d2923460e6ca318f80828ff97f89b3070308f27c791a633285d2df8c7edb2bb562da14eb10696021f70f27ebc4e94"], 0xf6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
syz_open_dev$ptys(0xc, 0x3, 0x1)

11:04:04 executing program 2:
syz_emit_ethernet(0xce, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x98, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x28, 0x8dfffffffffffff5, 0x0, 0x7, 0x600, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x2], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast1={0x3801, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x1, 0xb, [], [@generic={0x3f, 0x50, "4f672d4623532ab295a030a30bc1682ebb556c9bd34d270681bdfe3759d3dab550702d6251171f28bd87b98048f6db7b87ab64b7fcee9e53ea1d54bb2215e02ac6fad9f0f9cca5901bb615c99e98857c"}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x8}]}]}}}}}}}, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r1, r0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1, 0x9, 0x4, 0x2000000, 0x8, {0x0, 0x7530}, {0x2, 0x2, 0x9, 0x42, 0x9, 0x0, "a4aa55bc"}, 0x401, 0x4, @offset=0xefe, 0x7, 0x0, <r2=>r0})
write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x3f}, 0x2)

[ 1079.843453] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1079.880725] ubi0: attaching mtd0
[ 1079.975618] ubi0: scanning is finished
[ 1079.998552] ubi0: empty MTD device detected
11:04:04 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x80000, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0xf894, 0x1, 0x2c4d5bfa2416392a}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
dup(0xffffffffffffffff)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0)
fcntl$setsig(r0, 0xa, 0x39)
r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'})
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100))
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

11:04:04 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x200)
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
dup2(r6, r5)
splice(r4, &(0x7f0000000040), r5, &(0x7f0000000080)=0xffffffff80000001, 0x7ff, 0x8)

11:04:04 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0xfe)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xffffffffffffffac)
sched_setattr(0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f035000c803cf", 0x2f}], 0xaaaaaaaaaaaad09, 0x0, 0x0, 0x238)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/pid\x00')
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x4c8, 0x0, 0x0, 0x7ff]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x10, 0x0, 0x2000002)
open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)

11:04:04 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$minix(&(0x7f0000000080)='minip\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000002c0)="600b42e006000a00a1040200001adbc96824", 0x12, 0x400}], 0x0, 0x0)

[ 1080.326693] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1080.451042] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
11:04:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x05\x00\x00\xff\x00', 0x1})

11:04:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[ 1080.579052] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1080.611526] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1080.665328] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1080.712935] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1080.732946] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1080.739198] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1080.757640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1080.779663] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1676771155
[ 1080.797846] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
11:04:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r2}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1e, "8c68a4f647bf62c5eda3f1c3be45596726616ee22d0ad50deda0f4cc583a"}, &(0x7f0000000580)=0x26)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000ba00af61d500004b4d6c61ca7fb8d88fff7123d1b9e2562f42836a8985e6ac029c7115de977661f671cb7a44f448b5383beaf8ab5543e6d803b78f995990bf056713bbfb835505369366b519febde692576ecf702d2cffafb27a54fe08b4d666eead55c6145a9c2233d451fac64029cdc5a3cd1acf97fabeeee44fc49e2d74e52cfef90174d02a5035327894c9a5a312fed2e7cd8b3c4a7474b13e7e1c6d7083fd8309dfe28d1dd87c6200a2a1ff4951586020fdf9b4ba10f151b9b4ba7c266ea555d6a3ed4599a0aba4c12c6c66faa4322746f1096de4418110c6"], 0xc2)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1080.809354] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1080.820836] ubi0: background thread "ubi_bgt0d" started, PID 32275
[ 1080.828279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1080.837632] ubi: mtd0 is already attached to ubi0
11:04:05 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x39b671a5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x4, 0xff}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x402000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0xa0b}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x7b, r5, 0x402, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x1b, 0xa3b, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x2ed5ff6d1abb5a12}, 0x55)
setsockopt$inet6_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000080)="19e9c2375166897c47ef983600e19181de002a7e9a89c6fc70fd", 0x1a)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000200)=0x8)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

[ 1080.950644] ubi: mtd0 is already attached to ubi0
11:04:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose, @rose, @null]}, 0x48)
listen(r0, 0x0)
unshare(0x40000000)
r1 = accept(r0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000900000000000000000000000000000000000000000000000000004000ceeec42000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000d1b0c728a1984df7c5313f97894e7f0a61aeed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100"/651], 0xe5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
getresuid(&(0x7f00000017c0), &(0x7f0000001800), 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000000))
syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x40046104, &(0x7f0000000000))
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10)
getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11:04:05 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000000)={0x1, 0xde3})
prctl$PR_GET_TIMERSLACK(0x1e)

11:04:05 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r2)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:04:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r2, &(0x7f0000000000)=@caif=@rfm={0x25, 0x0, "8c08595cbbb438b802ca3861e289a870"}, 0x80)
connect(0xffffffffffffffff, &(0x7f0000000000)=@caif=@rfm={0x25, 0x0, "8c08595cbbb438b802ca3861e289a870"}, 0x80)
syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000240)='./file0\x00', 0xb369, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x6}, {&(0x7f00000008c0), 0x0, 0x3ff}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c646d6f64653d3078303030303030303030303030303030322c004e247e8543cc72e804d3a9a3d07318b251fd1e5c12f9759606e0650d7c63bbfd6167ae41f84658a86de877081ad06e4c5e6cf53ecaf0cae02943821f529cb6c72ed07a0a160d63709176e1e7e11480587261865bf71eeb0d143ce198883f41aeb8e09c3683713e5629d7130cf60102ecaaaae032a39a9cd199f6f1f66012eae6d27b95b015d0c23e387b5adc1a93155bdc351f35f00a47215d29b2a4a9901985f271e25849e33f6c76767de99c3a9ae99aa9dfe331add14f99cae0"])
r3 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00')
ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x81, 0xff, 0x3, 0x0, 0x0, 0x4, 0x1d00, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x3, @perf_config_ext={0x3ff, 0x40}, 0x800, 0x7, 0x7, 0x2, 0x5, 0x1, 0x81}, r4, 0x5, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

11:04:05 executing program 5:
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x2, 0x54)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10200, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5a93}, 0x1c)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @dev}, &(0x7f0000000200)=0xc)
sendto$packet(r1, &(0x7f0000000340)="d6c80472fd1fb1781c24e43cdb5d887343fc46a9845de916ad6536e2d15823a639590d03eacd3c180a9e26768d76ae5c2a446872c2e7b76fb42a2ab85abaa790dbd4794641e0646630f504edd5e04dfba1764dab20c99eb5ea22e1ded85425fac2eb41bb9ace79d00d2e37df625a14d7b884e59e6658f619f539073d2617559aefc892f8f9427312dd61d8717fde65779512b890df84c19ca1354477b04ac494c56df83da1f4907596e179da174bdd40999f34e2f39ca422ef", 0xb9, 0x80, 0x0, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000cc0)=""/4096)
syz_genetlink_get_family_id$tipc(0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x2000000000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @local}})
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000000000040001000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="11c95d126561d8c2f6a6e1d06e0fc1a7797baf7c93c8911b0b3a800d92caed8a9f3faaf236e1e2f6d99d2e44ba88474636e0a39e09fd8c9d3dc91fd33d514a7c15ff6bf16a09dffdbe2e976b25cc992a73bef450b56621fb8a9afef131a3e9ba80a3bad0107186a286653a77fec7de105b6faed1f3ff99c62fde0eb5e0ae3f411954848e8424f3c38d43f271107be5c7ec59032b5e6ad58728e78cab9276f1c507c9958f6feb481ebc", @ANYRES32=0x0], 0x8, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707392726469723d2e2f66696c65302c6d6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"])
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=<r2=>0x0)
ptrace$cont(0x7, r2, 0x101, 0x4b98a5ad)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[ 1081.175920] IPVS: ftp: loaded support on port[0] = 21
[ 1081.256843] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1081.307900] isofs_fill_super: bread failed, dev=loop0, iso_blknum=22, block=44
[ 1081.376946] overlayfs: unrecognized mount option "ups�rdir=./file0" or missing value
[ 1081.392480] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1081.456808] overlayfs: unrecognized mount option "ups�rdir=./file0" or missing value
11:04:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x06\x00\x00\xff\x00', 0x1})

11:04:05 executing program 5:
r0 = userfaultfd(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xd906)
r5 = socket$inet6(0xa, 0x6, 0x7)
name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="b000000001000000fc884707abf33a180fe0425bb7f8ea21d1d53722568139c42c80994e6ac872f82576e8bb9eada696eb25db6a48f860c2f6ad5273163183f1b644dd7c9c62ce89ee6b80a467822f605a30d36da2f71679d0c0981320d07ad15fa794c7aad3db1f391b5b58cb414106a3b537de81416251e03e955ccfea4b3b60fa4a20c58509327f612adc360b77f2bf03a6388f6894639e0f1cbd8c7ea3f8f65dec47269ccb978c18dcc4a0b28171"], &(0x7f0000000100), 0x1000)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x44, 0x0, "551224cdd1333f0f68b4f1207b288e0f518d432a14d2c3d7c6f8c91af3effdeed4224832cb530c1398bef6be33f3899c2e2fabb9e87bbacc28fea5ede05a1044b7fe23645f3c63772e3dddd933f977b7"}, 0xd8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup2(r1, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x140})
read(r0, &(0x7f0000000300)=""/128, 0x80)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

[ 1081.572161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1081.582940] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1081.589264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1081.638687] ==================================================================
[ 1081.646527] BUG: KASAN: use-after-free in rfcomm_dlc_exists+0x17d/0x1a0
[ 1081.653303] Read of size 1 at addr ffff88809c7e2bc4 by task syz-executor.2/32339
[ 1081.660844] 
[ 1081.662493] CPU: 0 PID: 32339 Comm: syz-executor.2 Not tainted 4.19.91-syzkaller #0
[ 1081.670301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1081.679669] Call Trace:
[ 1081.682287]  dump_stack+0x197/0x210
[ 1081.685936]  ? rfcomm_dlc_exists+0x17d/0x1a0
[ 1081.690381]  print_address_description.cold+0x7c/0x20d
[ 1081.695688]  ? rfcomm_dlc_exists+0x17d/0x1a0
[ 1081.700107]  kasan_report.cold+0x8c/0x2ba
[ 1081.704278]  __asan_report_load1_noabort+0x14/0x20
[ 1081.709222]  rfcomm_dlc_exists+0x17d/0x1a0
[ 1081.713479]  rfcomm_dev_ioctl+0x9c8/0x1c90
[ 1081.717726]  ? mark_held_locks+0xb1/0x100
[ 1081.721892]  ? lock_sock_nested+0xe2/0x120
[ 1081.726141]  ? rfcomm_tty_install+0x1a0/0x1a0
[ 1081.730651]  ? lock_sock_nested+0x9a/0x120
[ 1081.734899]  ? trace_hardirqs_on+0x67/0x220
[ 1081.739236]  ? __local_bh_enable_ip+0x15a/0x270
[ 1081.743932]  rfcomm_sock_ioctl+0x90/0xb0
[ 1081.748011]  sock_do_ioctl+0xd8/0x2f0
[ 1081.751822]  ? compat_ifr_data_ioctl+0x160/0x160
[ 1081.756623]  ? mark_held_locks+0x100/0x100
[ 1081.760889]  sock_ioctl+0x325/0x610
[ 1081.764530]  ? dlci_ioctl_set+0x40/0x40
[ 1081.768527]  ? __fget+0x340/0x540
[ 1081.772005]  ? __might_sleep+0x95/0x190
[ 1081.776001]  ? dlci_ioctl_set+0x40/0x40
[ 1081.779994]  do_vfs_ioctl+0xd5f/0x1380
[ 1081.783893]  ? selinux_file_ioctl+0x46f/0x5e0
[ 1081.788399]  ? selinux_file_ioctl+0x125/0x5e0
[ 1081.792911]  ? ioctl_preallocate+0x210/0x210
[ 1081.797332]  ? selinux_file_mprotect+0x620/0x620
[ 1081.802126]  ? iterate_fd+0x360/0x360
[ 1081.805943]  ? nsecs_to_jiffies+0x30/0x30
[ 1081.810115]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1081.815671]  ? security_file_ioctl+0x8d/0xc0
[ 1081.820187]  ksys_ioctl+0xab/0xd0
[ 1081.823659]  __x64_sys_ioctl+0x73/0xb0
[ 1081.827566]  do_syscall_64+0xfd/0x620
[ 1081.831381]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1081.836576] RIP: 0033:0x45a919
[ 1081.839777] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1081.858688] RSP: 002b:00007fb2a4a71c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1081.866414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919
[ 1081.873694] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000007
[ 1081.880974] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 1081.888263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2a4a726d4
[ 1081.896146] R13: 00000000004c346e R14: 00000000004d8858 R15: 00000000ffffffff
[ 1081.903428] 
[ 1081.905044] Allocated by task 30099:
[ 1081.908761]  save_stack+0x45/0xd0
[ 1081.913162]  kasan_kmalloc+0xce/0xf0
[ 1081.916872]  kmem_cache_alloc_trace+0x152/0x760
[ 1081.921532]  rfcomm_dlc_alloc+0x66/0x3f0
[ 1081.925594]  rfcomm_sock_alloc.constprop.0+0xb3/0x360
[ 1081.930788]  rfcomm_sock_create+0xf3/0x2b0
[ 1081.935086]  bt_sock_create+0x16a/0x2d0
[ 1081.939060]  __sock_create+0x3d8/0x730
[ 1081.943210]  __sys_socket+0x103/0x220
[ 1081.947002]  __x64_sys_socket+0x73/0xb0
[ 1081.950966]  do_syscall_64+0xfd/0x620
[ 1081.954933]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1081.960111] 
[ 1081.961726] Freed by task 32306:
[ 1081.965084]  save_stack+0x45/0xd0
[ 1081.968527]  __kasan_slab_free+0x102/0x150
[ 1081.972757]  kasan_slab_free+0xe/0x10
[ 1081.976545]  kfree+0xcf/0x220
[ 1081.979654]  rfcomm_dlc_free+0x20/0x30
[ 1081.983532]  rfcomm_dev_ioctl+0x1988/0x1c90
[ 1081.987851]  rfcomm_sock_ioctl+0x90/0xb0
[ 1081.991901]  sock_do_ioctl+0xd8/0x2f0
[ 1081.995689]  sock_ioctl+0x325/0x610
[ 1081.999304]  do_vfs_ioctl+0xd5f/0x1380
[ 1082.003178]  ksys_ioctl+0xab/0xd0
[ 1082.006621]  __x64_sys_ioctl+0x73/0xb0
[ 1082.010508]  do_syscall_64+0xfd/0x620
[ 1082.014298]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1082.019470] 
[ 1082.021096] The buggy address belongs to the object at ffff88809c7e2a80
[ 1082.021096]  which belongs to the cache kmalloc-512 of size 512
[ 1082.033743] The buggy address is located 324 bytes inside of
[ 1082.033743]  512-byte region [ffff88809c7e2a80, ffff88809c7e2c80)
[ 1082.045951] The buggy address belongs to the page:
[ 1082.050871] page:ffffea000271f880 count:1 mapcount:0 mapping:ffff88812c31c940 index:0xffff88809c7e2d00
[ 1082.060303] flags: 0xfffe0000000100(slab)
[ 1082.064442] raw: 00fffe0000000100 ffffea00024e09c8 ffffea00025a02c8 ffff88812c31c940
[ 1082.072312] raw: ffff88809c7e2d00 ffff88809c7e2080 0000000100000003 0000000000000000
[ 1082.080178] page dumped because: kasan: bad access detected
[ 1082.085878] 
[ 1082.087499] Memory state around the buggy address:
[ 1082.092413]  ffff88809c7e2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1082.099769]  ffff88809c7e2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1082.107127] >ffff88809c7e2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1082.114642]                                            ^
[ 1082.120079]  ffff88809c7e2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1082.120376] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.127430]  ffff88809c7e2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1082.127444] ==================================================================
[ 1082.127449] Disabling lock debugging due to kernel taint
[ 1082.127606] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.132547] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.139891] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.167855] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.173671] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.178746] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.183879] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.188943] protocol 88fb is buggy, dev hsr_slave_1
[ 1082.194105] protocol 88fb is buggy, dev hsr_slave_0
[ 1082.215298] Kernel panic - not syncing: panic_on_warn set ...
[ 1082.215298] 
[ 1082.222726] CPU: 0 PID: 32339 Comm: syz-executor.2 Tainted: G    B             4.19.91-syzkaller #0
[ 1082.231917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
11:04:06 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000260029032cbd7000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="10000300f1ff213c0e00000004000a00"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff01000000000036", 0xfffffffffffffec5)
close(r9)
r10 = socket(0x10, 0x2, 0xc)
write(r10, &(0x7f00000002c0)="eb9860b7236deb1f0000000504ff00fd4354c007110000f305010008000100010423dcffdf00", 0x26)
write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b0003", 0x7)
r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
r13 = dup2(r12, r11)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000000300))
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r9, 0x0, 0x4ffe0, 0x0)

11:04:06 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000a00)="aa", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7fe}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000180)='Q', 0x1}], 0x1}}], 0x2, 0x40)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe)

[ 1082.241278] Call Trace:
[ 1082.243888]  dump_stack+0x197/0x210
[ 1082.247538]  ? rfcomm_dlc_exists+0x17d/0x1a0
[ 1082.251958]  panic+0x26a/0x50e
[ 1082.255166]  ? __warn_printk+0xf3/0xf3
[ 1082.259157]  ? rfcomm_dlc_exists+0x17d/0x1a0
[ 1082.263576]  ? preempt_schedule+0x4b/0x60
[ 1082.267738]  ? ___preempt_schedule+0x16/0x18
[ 1082.272157]  ? trace_hardirqs_on+0x5e/0x220
[ 1082.276499]  ? rfcomm_dlc_exists+0x17d/0x1a0
[ 1082.280929]  kasan_end_report+0x47/0x4f
[ 1082.284916]  kasan_report.cold+0xa9/0x2ba
[ 1082.289081]  __asan_report_load1_noabort+0x14/0x20
[ 1082.294022]  rfcomm_dlc_exists+0x17d/0x1a0
[ 1082.294765] kobject: 'loop0' (00000000af017d2f): kobject_uevent_env
[ 1082.298268]  rfcomm_dev_ioctl+0x9c8/0x1c90
[ 1082.308891]  ? mark_held_locks+0xb1/0x100
[ 1082.313063]  ? lock_sock_nested+0xe2/0x120
[ 1082.317316]  ? rfcomm_tty_install+0x1a0/0x1a0
[ 1082.321820]  ? lock_sock_nested+0x9a/0x120
[ 1082.326064]  ? trace_hardirqs_on+0x67/0x220
[ 1082.327158] kobject: 'loop0' (00000000af017d2f): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1082.330400]  ? __local_bh_enable_ip+0x15a/0x270
[ 1082.330418]  rfcomm_sock_ioctl+0x90/0xb0
[ 1082.330433]  sock_do_ioctl+0xd8/0x2f0
[ 1082.330446]  ? compat_ifr_data_ioctl+0x160/0x160
[ 1082.330469]  ? mark_held_locks+0x100/0x100
[ 1082.330484]  sock_ioctl+0x325/0x610
[ 1082.330496]  ? dlci_ioctl_set+0x40/0x40
[ 1082.330508]  ? __fget+0x340/0x540
[ 1082.330527]  ? __might_sleep+0x95/0x190
[ 1082.330538]  ? dlci_ioctl_set+0x40/0x40
[ 1082.330554]  do_vfs_ioctl+0xd5f/0x1380
[ 1082.330568]  ? selinux_file_ioctl+0x46f/0x5e0
11:04:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\a\x00\x00\xff\x00', 0x1})

[ 1082.330581]  ? selinux_file_ioctl+0x125/0x5e0
[ 1082.330593]  ? ioctl_preallocate+0x210/0x210
[ 1082.330606]  ? selinux_file_mprotect+0x620/0x620
[ 1082.330627]  ? iterate_fd+0x360/0x360
[ 1082.365562] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1082.369151]  ? nsecs_to_jiffies+0x30/0x30
[ 1082.369177]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1082.423364]  ? security_file_ioctl+0x8d/0xc0
[ 1082.427788]  ksys_ioctl+0xab/0xd0
[ 1082.431254]  __x64_sys_ioctl+0x73/0xb0
[ 1082.435159]  do_syscall_64+0xfd/0x620
[ 1082.435266] kobject: 'loop1' (000000004e7f4b43): kobject_uevent_env
[ 1082.438982]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1082.451484] RIP: 0033:0x45a919
[ 1082.454694] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1082.464991] kobject: 'loop1' (000000004e7f4b43): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1082.473601] RSP: 002b:00007fb2a4a71c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1082.473615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919
[ 1082.473623] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000007
[ 1082.473630] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 1082.473637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2a4a726d4
[ 1082.473644] R13: 00000000004c346e R14: 00000000004d8858 R15: 00000000ffffffff
[ 1082.475106] Kernel Offset: disabled
[ 1082.532294] Rebooting in 86400 seconds..