[ 34.974660] audit: type=1800 audit(1551964945.706:28): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.765986] audit: type=1800 audit(1551964946.596:29): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.784801] audit: type=1800 audit(1551964946.596:30): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2019/03/07 13:22:34 fuzzer started 2019/03/07 13:22:37 dialing manager at 10.128.0.26:43477 2019/03/07 13:22:37 syscalls: 1 2019/03/07 13:22:37 code coverage: enabled 2019/03/07 13:22:37 comparison tracing: enabled 2019/03/07 13:22:37 extra coverage: extra coverage is not supported by the kernel 2019/03/07 13:22:37 setuid sandbox: enabled 2019/03/07 13:22:37 namespace sandbox: enabled 2019/03/07 13:22:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/07 13:22:37 fault injection: enabled 2019/03/07 13:22:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/07 13:22:37 net packet injection: enabled 2019/03/07 13:22:37 net device setup: enabled 13:25:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syzkaller login: [ 241.845321] IPVS: ftp: loaded support on port[0] = 21 13:25:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 241.955547] chnl_net:caif_netlink_parms(): no params data found [ 242.033837] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.040637] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.047964] device bridge_slave_0 entered promiscuous mode [ 242.058715] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.065500] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.073170] device bridge_slave_1 entered promiscuous mode [ 242.105541] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.115258] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.149155] IPVS: ftp: loaded support on port[0] = 21 [ 242.157176] team0: Port device team_slave_0 added [ 242.168359] team0: Port device team_slave_1 added 13:25:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, 0x0) [ 242.251285] device hsr_slave_0 entered promiscuous mode [ 242.301581] device hsr_slave_1 entered promiscuous mode [ 242.355997] IPVS: ftp: loaded support on port[0] = 21 [ 242.388279] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.394839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.401862] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.408239] bridge0: port 1(bridge_slave_0) entered forwarding state 13:25:53 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') [ 242.568728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.651197] chnl_net:caif_netlink_parms(): no params data found [ 242.664147] IPVS: ftp: loaded support on port[0] = 21 [ 242.669961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.687249] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.705209] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.713223] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 242.733115] 8021q: adding VLAN 0 to HW filter on device team0 13:25:53 executing program 4: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)) [ 242.769003] chnl_net:caif_netlink_parms(): no params data found [ 242.804822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.813276] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.819638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.826882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.835237] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.841654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.900863] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.907255] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.915476] device bridge_slave_0 entered promiscuous mode [ 242.925678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.934653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.942683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.950175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.973139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.982774] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.989135] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.997363] device bridge_slave_1 entered promiscuous mode [ 243.019227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.029977] IPVS: ftp: loaded support on port[0] = 21 [ 243.069593] 8021q: adding VLAN 0 to HW filter on device batadv0 13:25:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000), 0x10) [ 243.123622] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.129998] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.137921] device bridge_slave_0 entered promiscuous mode [ 243.146956] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.201421] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.207821] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.216103] device bridge_slave_1 entered promiscuous mode [ 243.225523] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.265960] chnl_net:caif_netlink_parms(): no params data found [ 243.303738] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.313187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.329753] team0: Port device team_slave_0 added [ 243.359167] team0: Port device team_slave_1 added [ 243.395076] team0: Port device team_slave_0 added [ 243.404659] team0: Port device team_slave_1 added [ 243.443043] device hsr_slave_0 entered promiscuous mode [ 243.461628] hrtimer: interrupt took 28155 ns [ 243.490563] device hsr_slave_1 entered promiscuous mode [ 243.574161] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.583500] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.591628] device bridge_slave_0 entered promiscuous mode [ 243.596727] IPVS: ftp: loaded support on port[0] = 21 [ 243.603270] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.609704] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.617221] device bridge_slave_1 entered promiscuous mode 13:25:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 243.723019] device hsr_slave_0 entered promiscuous mode 13:25:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x581000, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000300)='./file0/f.le.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000003c0)='./file0/f.le.\x00') symlink(&(0x7f0000000180)='./file0/f.le.\x00', &(0x7f00000002c0)='./file0\x00') ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="010005fb08000000ff000000000000aaaaaaaaaa2a94ba36f959ad964cff980f169930728a2f3fd76b2c8410e9b37745d89633b0fa03dcb9e0dc6aa08dd531f82cea73142b392a85a3ee90544e07d63f8f"]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@session={'session', 0x3d, 0x100000000}}]}) [ 243.791285] device hsr_slave_1 entered promiscuous mode [ 243.831439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.846415] chnl_net:caif_netlink_parms(): no params data found [ 243.894221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.959633] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.966041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.972721] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.979085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.995896] team0: Port device team_slave_0 added [ 244.006838] team0: Port device team_slave_1 added [ 244.038470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.046747] hfs: session requires an argument [ 244.062867] hfs: unable to parse mount options [ 244.072909] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.079265] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.086565] device bridge_slave_0 entered promiscuous mode [ 244.100050] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.107302] overlayfs: filesystem on './file0' not supported as upperdir [ 244.115180] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.126399] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 244.164331] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.175077] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.184039] device bridge_slave_1 entered promiscuous mode 13:25:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0xfffffffffffffdf2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x8000) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x4924944, 0x0) [ 244.216455] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.262613] device hsr_slave_0 entered promiscuous mode [ 244.311187] device hsr_slave_1 entered promiscuous mode [ 244.351695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.358665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.403102] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.419764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.445632] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.476679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.487340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 13:25:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x3, 0x4) ftruncate(r2, 0xfd6f) sendfile(r0, r2, 0x0, 0x80000000000f) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x8, {{0xa, 0x4e20, 0x0, @mcast1, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x8001, @empty, 0x8}}]}, 0x110) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb9, 0xfffffffffffffffd}) [ 244.495375] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.501820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.526915] chnl_net:caif_netlink_parms(): no params data found [ 244.538377] team0: Port device team_slave_0 added 13:25:55 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @local, [{[{0x9100, 0x80000001, 0x8186, 0x2}], {0x8100, 0x7fff, 0x100000000, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x4, 0x0, 0x0, 0x543], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 244.549570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.559740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.568174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.576364] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.582814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.591474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.600162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.609796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.621436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.629526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 13:25:55 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2710, 0x0, &(0x7f0000000380)) r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x4000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x240, r4, 0x322, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7dcfb934}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff0a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdba}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x41000208}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0xc08, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x520c08f0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) [ 244.660006] team0: Port device team_slave_1 added [ 244.689051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.714953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.727544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 13:25:55 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2710, 0x0, &(0x7f0000000380)) r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x4000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x240, r4, 0x322, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7dcfb934}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff0a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdba}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x41000208}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0xc08, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x520c08f0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) [ 244.736439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.744533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.753483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.765764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.774714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.792020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.855523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.871772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.899691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.908627] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.953159] device hsr_slave_0 entered promiscuous mode [ 245.010546] device hsr_slave_1 entered promiscuous mode [ 245.050557] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.057185] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.064374] device bridge_slave_0 entered promiscuous mode [ 245.083504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.103448] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.109802] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.117117] device bridge_slave_1 entered promiscuous mode [ 245.137861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.144706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.152229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.159916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.167781] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.174179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.181627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.189343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.197035] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.203383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.213521] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.228784] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.248262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.259218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.295164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.319191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.330802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.338688] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.345081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.352082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.359755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.367416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.375059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.382821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.390416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.397742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.405503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.413064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.421287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.428878] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.435289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.442321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.451293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.458318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.465378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 13:25:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 245.493195] team0: Port device team_slave_0 added [ 245.499507] team0: Port device team_slave_1 added [ 245.514114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.533396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.541622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.567324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.576711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.584927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.626510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.664943] device hsr_slave_0 entered promiscuous mode [ 245.720564] device hsr_slave_1 entered promiscuous mode [ 245.782818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.794827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.804737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.816002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.824262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.832200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.839623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.847465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:25:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c12a41d88b070") syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x3, 0x3, 0x0, 0x4}}, 0x80) [ 245.889536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.903703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.920021] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.932684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.998326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.006352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.023852] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.030285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.042071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.049802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.057698] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.064118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.072996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.087451] FAT-fs (loop2): Directory bread(block 64) failed [ 246.095604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.096506] FAT-fs (loop2): Directory bread(block 65) failed [ 246.110735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.115157] FAT-fs (loop2): Directory bread(block 66) failed [ 246.119447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.128495] FAT-fs (loop2): Directory bread(block 67) failed [ 246.142007] FAT-fs (loop2): Directory bread(block 68) failed [ 246.162099] FAT-fs (loop2): Directory bread(block 69) failed [ 246.164724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.168100] FAT-fs (loop2): Directory bread(block 70) failed [ 246.175718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.182635] FAT-fs (loop2): Directory bread(block 71) failed [ 246.194304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 13:25:57 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffff9c, 0x50, &(0x7f00000005c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=r0, 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x1, 0x4}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000003c0)=""/248, &(0x7f00000004c0)=0xf8) listen(r2, 0x7) mount$9p_virtio(&(0x7f0000000000)='/dev/mixer\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x41008, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697270696f2c36657273696f6e3d3970323030309666af9c1db7b1103078303030303030302330303030303030312c7057279fb865726d69745f646972656374"]) fsetxattr(r3, &(0x7f0000000500)=@random={'system.', '9p\x00'}, &(0x7f0000000540)='ppp1\xcc#vboxnet1\x00', 0xf, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept4(r2, 0x0, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000380)={0xc2ff, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) close(r5) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x5}, 0x1c) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x1d5, 0x0, [], {0x0, @reserved}}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x200) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r7, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=ANY=[], 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000009c0)={r8, 0x1, 0x6, @broadcast}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4010744d, &(0x7f0000001000)=""/174) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000180)={0x7, 0xffffffff00000000, 0x8000, 0x17df}) [ 246.207700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.215272] FAT-fs (loop2): Directory bread(block 72) failed [ 246.216745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.221907] FAT-fs (loop2): Directory bread(block 73) failed [ 246.228755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.287435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.299336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.320338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.327965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.364702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.388770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.396492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.406374] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.416947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.428111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.449738] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.456174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.498329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.514282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.545933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.639793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.709769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.727082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.781032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 13:25:57 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000010c0)={0x0}) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x80010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x20, 0x0, &(0x7f0000001100)=[@release={0x40046306, 0x3}, @free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r2}], 0x42, 0x0, &(0x7f0000001140)="937773ccc65ad050ff8c2e1ccc2f65058818a04c27e58ff3d4b5ac2819f5a7508220d06bf81df5eaa7d99a2d37fa36a869dac23223f8cb01eb019a001a57bb06a024"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000001080)={0xf, 0x4, 0x4, 0x8, 0x12, r3}, 0x2c) r4 = semget(0x2, 0x3, 0x42) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000080)=""/4096) 13:25:57 executing program 0: mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) fcntl$setsig(r0, 0xa, 0x25) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0x5c) 13:25:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:25:57 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0xdf6, 0x1) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000280)=""/49, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x20e) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000180), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20, 0x0, 0x5}, 0x20) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xa) 13:25:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000940)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100009ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x550b, &(0x7f0000000a00)=ANY=[@ANYBLOB="f214ecc3470000010002000000000094e50251383be14cb631fde00000a2197110af3ef315880000ab404686106b70472ceca20e194564d6d0e37f5cfbb71cd264141146d6430ff9257cfd30b8c951c19b7e9a12613a687e14ce67e53c1c4ccca77af8cb90d7bc734ae3a9fcb48ac806b17b41a02dd47e1879357f1bf155cd61f26c5cd19b76c4a4ba67a27d7f7f1f1bd147aa12b834ae9fcd314b0dfa4acd645e68d731b0ce9325d54ff366438028cf17c466f97845ce0346f6241d409c8527ee036d9b953a24cc6a2d3ef0f89cc5fde3ee5feb5428a704243663f1568d20cd96938b29626f7b56259a7cdc58e5db78f2ca238c8d035464e0ddf14420114072ee37bd9308604d18cefc0ed3e90d1f7b6e399f71a2e8cea71009e8f0b6f814c8630bcdaef953033a991b3767b95e1f6eccd6ec411968735bcefeb8bc287d8347dc1ac189a1a2ae97bb614c590a295a21651715fbda92225f56dd2647726cb52dd5215d2457802077058964fc04589e70e549aaec78a0b064ee5ed34407b84b8036020cca00153655e7f6f0776538f6949d02dd88c041f8073d886137d5c5ff2779be0b35e92f76b94940839cebbd40d605ee"]) setsockopt$inet_opts(r2, 0x0, 0x4000000000d, &(0x7f0000000480)="43cf9db30346ba28", 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2b, 0x15, 0x11, 0xc, 0xa, 0x1000080000080, 0x1, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000280)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x85, 0x2, 0x7fff, 0xffffffffffffff81, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r6, 0x6}, 0x8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x430000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) [ 246.825642] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.832084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.898937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.937497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.975786] sctp: [Deprecated]: syz-executor.2 (pid 7723) Use of int in maxseg socket option. [ 246.975786] Use struct sctp_assoc_value instead [ 247.022518] sctp: [Deprecated]: syz-executor.2 (pid 7726) Use of int in maxseg socket option. [ 247.022518] Use struct sctp_assoc_value instead [ 247.046439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 13:25:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xe, 0x2, 0xfff) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100000000000107, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f00000000c0)="1f0000000104fffffd3b54c007110000f30502000b000200000000000200cf", 0x1f) ioctl$RTC_WIE_OFF(r2, 0x7010) 13:25:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x101000) fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe4\xcc\x9e`\xa0\xce\xf0+\x19v\xb9I\r\xada\xb7\xbf\xd5a\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9QQ\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98\xd3C\x10\x01|\xff\xb5\v\x930xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) r3 = getuid() setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000003740)={0x4, [0x5, 0x0, 0x40000, 0x10000]}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000003700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000036c0)={&(0x7f00000001c0)={0x34cc, 0x33, 0x0, 0x70bd25, 0x25dfdbfb, {0x6}, [@generic="2a049aa8625644d583cb0db6d5c7d013fa7c51", @generic="497b83fe68ab4ba5418cafa7623f0f66820cdb61ea4ff994509e74d90d459c774b6fe22baccf8ff70094974ad8cb5be63fad919c311a1cd8f092e731e4e54f152e90a80fe86e3d0021f51af73cd1e95bac5549c04cf42619922134417e815adf19bc9e4d25e8b14932b8e3b9ba964b64d8ea6520c90be1067499b04dfa84756a782f6f476d1532dc48f3c99f234ab3df4aa407c0783258480983907600f8a6e20f8149ae3661ef6148564583878c0029a172ee97c7b420fea12e8f8ddc628feae293fb043b0cf01acaf7abd2ec4b08978dbfff374a8b9cbf2791908fb9da", @nested={0x11e0, 0x1e, [@typed={0x8, 0x8, @str='\x00'}, @typed={0x8, 0xf, @uid=r2}, @typed={0x8, 0x44, @u32=0x1}, @typed={0xf0, 0x65, @binary="6642f26891f54dff5ebefd3319d6ba9287b5b56db99c522197e6b48cea0ee2c9d7cc478ec519a445e71b3296f9a65e527021f614104bc61f4a46848edba59973bc65cf595bb542bfb25fb94c82b324e45d59ae84311148d9d1d6600864f5910a66806b1e6405bc78830605703848c779653cc44f46b4f01417f4ba900f61978799df20ebfda2dd6e21bc2d87977f750a72d98f309ebab65793fd93fbb2dda75e06698f286858825347e08f9a1c90bcaf064a5cbe214594a88a4c9116a0f75b81c7cb40be6bbf7c588506040570f6046e37e6965ed969617af764f6e0adde636c36dc53170ba7a9034adf49ee"}, @typed={0x8, 0x1, @u32=0x8}, @typed={0x4, 0xb}, @typed={0x14, 0x14, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="988910c7ec8f67af7c26318f16e32ee46694e5831c55962c9ec139033f754321e151d8cc41b952d775c6ad8593f55eb274d4a7b4c9edac54b798bfa455c3ce23070f0a293e7c31a5e024a9a2bbeea4a222a7989a88f75497a4aa68ec558567d96f894eab015067aa0b0c54c5a4ecbcb7e147e6d446058fc411b09f3d8767b13b145898c2407ad07299114e93de5f8ac80c7ecf75712edcf232a04164050594c02bf6735f8f9a6a395d48ae9745f5eb9b6241", @generic="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"]}, @nested={0x18, 0x59, [@typed={0x14, 0x94, @ipv6=@rand_addr="85aef0d53a45071e95e330763eb9fb5a"}]}, @nested={0x10cc, 0x65, [@typed={0xc, 0x10, @u64=0x5}, @generic="57e5b68adaa0eb3704daa84a919bba4cbabffea0eed59a6bdc5d72380009dee12e40888c0b543aa4393eb45780fc36d528ce2531980c1475c087163bec86a9ba625948ee5d648cb1b92ed2061fed0adeecb6624828e8b3824c451bac9c74a9b6814757ed3ee92b7a686aa22d414319e4132d856c2f2089bbff5ba4f0b52243a638b29f5decf5aa0900967ea097d7a854738c77033c8a6cc80fa4dd2921b93b67c552af", @typed={0x8, 0xf, @u32=0x6}, @typed={0x4, 0x14}, @typed={0x8, 0x38, @uid=r3}, @typed={0x1004, 0x67, @binary="759f7bc47e4e59205099a60425df0cc64171a11fcb9dd411cd15a6dc4dae801207c678f354a70e007ffa56a858fd77b2b452fddd9976fb896b194e87e6c82e6c49bc7a023697ede0592f479f0ae0db895d043324b866fcf795ff27e336e2675b2b7134b5730f7cbc5bdba0f65a594016461a1f8f3f2530220c6430fee16b58ce24cb2abd87560b65831d8bcccfc93cae6c3ec590147ed0160b87120ba6ed28af38b883f688c7574be107b0398b1ce8fef09522752cbc148d7a73c9aa9238d3c43d5a6b0334e4b0888699621cc17d0f415afb4529df81b4b2f724570b0ee623e803f31dffec97e42a993fc8e81575ef62765c6e566ffdec5b426da6bc2d120969d3ef58561ece4ac2a9e0b55a4e0d1d6f1f0fc2e2f05e6b02b3ca5af2fe59a1eb433b5f8e80abc588d7e4841198cb959dce0dfbedf927fadfc4dde45c138dac802cad1ca91997b2a5eb04b4ce1177d2e806b1e12325ffd22856d80dd581908ecc5f984a3b424e492d6ed3b8233d9975ede7149eda46954b22483ff94dad20a7dd1d988dc2e725dbbafcac4f6703bc14a25fbf8676784755ac5359b8f7a82d3c74af751ca7be55065d215fc1b745e4a1802f35ef581e57ec88e3ee1c26fa123324eb773fddd7850502ebdfff7b64c00bd9e42b654af0eb46f8b16e4ce5680799bcdecea4fbaa27d9a2f0e14fd27478885029460d0213191d5159b9c883e87119e018989f158f219c49473818b0bdc490a900ab97adcaaa454efe344d7d69f3eb4690d84b29a8430e350051a4a82d3034317ecb6c9b08207be07ba74b0e94943c11425edb46c0b3a97d36b7a77b0458b3e057b43e38038beb962f008e5f89c436488881765f727e1f22c2fcdd33b58e57d03e00b715d9175f174214b006d1beac7cb35f08f2825495ca1c9fe7524b24d35b2f1b762738e3af46d34b34353031285d5edac2bc0e6627aedb9af9c3d783b79a79e39ad50dbb4c9c5c4842f899ad3fcdf264ea63679b14486483e4767f3b28793e0a067f0207a712661bdde1e7bc8f2fa50ee9eca1fb50ca163c3b1bafa5b505faa35fb87a7b3de42903ecf5bf9c28c109ad3c95ca6a65fe580af3549fd1700a763a0dcbd2a3af17bd11e2aae89088ce046cafcb917b33cce761500ffb79354642d6012aaa5cf50659585db28f501837259ccb5933ed4a141f438f618384f7b26db0b54b44ad0febebdd73d48e0dc187cfb00b5c064e4d9577e45add6da73355574a6366bede80d3ed1defdb8c57799a0b9d8e38c09f9f36fcc72648d2665b7a8aaf4c011a7c335aa801fbfbe0f7a500094cc48fbfeb889a4b881945ac021a2f0f40fee7bce08e7d87e9707a5366501632c31edd2357e8bb6f156c7f920e9a26e2913f31f8b2bd5d875ed1919726184612cccdeda4ddc2a4beb583e09dfb5feeef2b846133f6a8a323cf33e349eb1a647b174a1d0e80d85e43ebba32da611d58f7f8055bedb7f348ec7430ed66d2f55b81b517e551d7a69af6bc8d476bf3696dfa69b79fb6d774e43b3447b91694361314e6d1ac5184ffe6e7a92ad12b17a1427e329fdf73503ea3cee8c777d29d640f4b0cc6456de1f75724038e31981eb7c233675dd6064c9d4cc9c462c4d059eec42da3740caacd13812591c61c0bc089f866783997583b7f1add47d5bbdd0e779ed966f50db5c3fa6a114f7dff5393d8fcb44784c81bab82b79bdae8a209e24aa2b085a07066db03517a641c2609aa368e17ead9f8f4836e2bd01f1b3d3d3e8b4e85ea84c1868e7ddafc6eb01cb66a82476189f305d1532495eff2ebb312c659bec9b1e893c75ba4843e1c920a670085934715ed58d95a1d34a785e454df192e0fbce25b6df601ff57ccd1ebaf298f4c346588351aedf9e90cb6d49d7404fb230e7be355589b07a18b207650f65ecc9930b7739f4b278f6828e9d49ee96e53d9aaefbbc86949d84e97adc23c674842a7db4a59d898e91cf8b46907ae76c121edbb2fe233ee51391884ae19d35e3d069f309a2fcd1f69a0d36cda8244556d24f8ae9431d26c84a3509f5e6da8593fd5c1e54e8fb139bbc5afe54884240b0d151ba7acc0a38b166940f99cf5b756493d38a2ed14ec5f4ee7aff06f693fa87e8244422ca6229a9794b96af2f668eea499b915fdd2ec9e3ebae826dcf86990145b6b8b932619b3f159ee701e093898b62cf568fec798a47356d82c6daf97e570b716b85766f311afc1168c4913057762794011a0fb135420b35e86b59d6282d641d55e003376daf7af9da8c23ab43b7063ea123a0045894e44aac55a535999e2783115480291adccffeeab14a406794b8babd0a3f516b5203d203b0bdeb0a3393e9d2990623e2a708fb7ee70f64e1a6a2b8ee724e682e9c6c61e53b9f5d2eaf37319b4176cdc1fa36886ba1504536f6d0e6676e0331045bdc2461f8826e57bf7a4e50cf115d51f1bb21cd4e9d6b6bc2ac4d74e0e0a96aad8b3b609beffba88af380266456120962c6168d48236864b69077aaabb653d7bd517af97b2c8b246fd1b37937bf2e0a2623825fa7559f8bd24ec5820d218ee345e7311894a06ab417b01cfa5ee9f38fe7f77a8539089d6a090a7462ea2315fe7941dece6ac655143b5edc7c6fc24bc9ae39d8e5af566b918ed588837e8f439472d1c458d9baeedc701c922b3c322930de5f3c8e9e1ed5ec099680c792a355a6a08e9349531f9f8e5927a9b68b2ff620cb61f94ec0cf78dd932867203b1c67c2b235a9c6ec20e6b53158e3a0acb7a3e1df168513ec909ec31b68ca4d027b7b703ae0b91708fb4eec2c347b95631a89d5a1d0b59f4e1c58d2ebd9f7f2f65caadbe3b136685db984d78de1780063041f8e8e4f0386523925df78e4e689d9513808937ffce4256c68bf46f62b50edc8dd2c21e26b60d055b22f11bbe0086232d2c9b67121e6d7e996405d2409305e076a4049e9f6cad7f025cf57fb3a3bcbadafe86e52f6718bccf325422d4e972d4c5cbf67b4d88dfdd1553f5dd6f03c598e9c3fb54ccc36a525ef7cd7458e41c5e01a82aa01c8c6396d346a4f3f732207b5cc60663bd1f359979d2cf78b02063df1d46092c1f757ea937705b5fd28b3b63c65382c014a64a8a6f79641a08e5733728a074dbc1025ea87749dbb6ffa0750a10038c619c2dac9223a2cfa9e8a1edd2b96484039cb7a515952d3a4d6f175c4b485ebd983e4765d29168c76d5bc81091a4f41e4ef302d77c29b3b8a46dffa4ecb22bbfaf0244f15af57d506ba8027f09723324f1bdbae447aa36f903d6d89642edd28f8565463e33ebd6199600cbf29cf84c484d84e6084435568fcaaa8ea20f77217cb854a82bac398a0c2d8119e91eda712be84e03ea4e431b9c5c9d7fa4d81240a10d2ae53aa78f5c501115027fb8798b25347ac639c34b1c1cbacc78b7354d36069db1a6d66a4215c1a5c29c20c0b35b467d0c11afbf6f196376bedec3943f05db27180522e3fa7a264926988760206137204f6f9bb1438766bda340cd67706fce90204e9e0d963f4ba5d9b364979d1de87f29850f99f1e43b37b561cc232d236d6d3832e89f0e7ac0b4e9d7ca5bae5514dd2d2b545c606a9b4de05f7ad60ed01778ea61c5e5e87cc846de77ca1e2ad01c2800410efa472733dd10792a36c176e22f822e4998366cfa40bc2c0a3fdf48ef9bdf5a2704c11994b8163031bd49b7885bb40ac1a091ad35a74ab0bfe40860066df0b9cbbd0a31195a951faffd9e63a82bb79159b1da378afe12ac5c31aad55fc7c438ea96ca81770f129c25ace514f33752e745d32850ee5c4ed1592ed952d4a50a5f25d8c7379474497f56fabf3a4175e524cd7ff1c43c385f30b38960368129b0f8e23837f058954cec3171231bb504e4b9c2faa811fbbfa1bf9fcf109a0fea1c84e572533a3242d7fa2ec15ea481a69e5f1f886cc15cec581941ea6a36508ce3b6dc1f1069d9933f243b91af3016298477b5c3d6c584a4325396a27682abd97b490a3c2fc433c8e75481db22b732b955acd4319d17d01b7ffe4be49b457a7fe62844dfc670ba6a581978529d9de02ee3442db86c8887ef8126c1d5b168057c5d8b86eb544a51a2a6ee9d7110c70f08b1e114c13a5b9dc25d15282131c35566e69bd904e7d33a61d7a8ee4a033a5ac40d036cd66ce31778da05381ef92d62781e5b2c7a29b71a98eaf0e0d04f560a294e360c5f63d365168d339d316cea239079cf72119a8e21d9b70409c6ca0144ac0eeba0729487016d98cca4abfc494f2fca1d7d0d16c5cbc83759f5ec051638c191f2ef288714e0f5dff7bae11ca5228eb84e1e8fa1cf371bcb1cae80f0455e6892059ad79a36b3002bc7855cf2e75165981f29f94b3d8227e400bb06114512cc281956a07c7a690c7c4bec1ff80b375c3e6545c516d94e867d4c21780809b2b2b2cfc7525a8625a342237426a8b17b0d5937a18d2307d5674ffcfdd0a6c9e0f0dd22716f681d90301a710dc8422def0f4abfdc5ce86e38ae3b884cea9713f2d7952f341071e214f78de1e7ce92f3d6391e35072df0009c2ea90bc282d581881782e0fcbe275e5f6549a9d5e83155c3fae31af316917d2dfb353c313c951415da21d2814d49258c33851435b49b29c808e5f9816af30c971409be7889c0f080a21710f0a65e042119999187ce3edabc4220b7cbb65f1c892a7536f2791c5e1b07b285cd1053de07974c7fa50eb6716e0f61753ed1c7f2cc00ec5d38a877a8eb351f5b19d20a47fc24e783cfcba1212f2f510d8ba9dbaebd4006aa0c4bc37ab2d5bb5eedb18673c5a7a0be368baf589696688eeed8bc331965c87db42457bedbff850efa7853a8ab08bae59e745252a25b39e85fa0339ce578849c4c2f7f74e645bc1ef17973b98ab8ac876ce72f1193d900d90ffa812b4c6c100534856c7321b97e4bed74b677f01e556ae174eadbfde6a209cb500879010553e61be5b0405e74dcf8db2e712e3f8b105e5e62ffea7bfb76fbd76920848664db745e39eef6eed60c51cfed4d0a84711942dc71b622699ffe438a1a5e789d0b0a7961d72448040b782c162f89c532175d12675e633fee94d72597689e75b7bf9b55466f0ffa1d7dfa01e7d259c96064cc910835f2c7d8b5539d682f97d60f347edc70d5e2d9e2c122413513bebca49d38c18b29f0e5086a23daed8f81be8e91c34f3e26d10ec1289c0365890e7034452c4ed9a60ba823731eaf0845b5d5cf900976ecb0b9651eca759088db1b9ca961c370bb453ab6d025aa02e40752c2400704ceff74f1e2c345a8c82c6981a6cf8e90852cdd37e8817bf020d9117c8bde3f1a523b873ecacbdb081478346d99a91b7761ae5d129f50a834b955c49daadc7a135d48f575f2c2102baa0b484b357b1446c343f12cc42f0c0b137fbfeeea392d7ddcc4b2f33e3aeb7ffa02b278bddee6b5df62932de843e8256c43a7acb7c068548e4ffd73791a10675872e08d2ba83dd3d109e199d80302767b6bdadef0dd6a23451ac826736aefc54443c634b8f0a8c505abaeaf9f1c0378edf7952f48e619d32a3aa8870cedbbf0f1ea416d8855db10685df5983f1d229ddad42d7bda7021a365f7514ef6de43cf3881138cb2fab714d8418dd2e99470d8003a648ad9dcb00cd0bb7fc0ed8c8b8398b46b7b1869e0c63b5aafcc87782cd497a0e99d9a0b980c44a9839b12e7068aeb982cb928949925b9c78dd9e02604c368b5abd153112db8c4902ed1f9e50dc72633c87e286289017f45780609cbc2ea3aa58d7498a28c1a7a48b0644e7dae58f9873537df088e985e50"}]}, @generic="24ddf54b4a0a2c7ac332cdd0c512d38b5c20e0019bb4d6ec43d1c6b2f04ee7ef74900b3ec19364148f83b2320af8d887ae0f544669b8e56362f7acffb6d0eb8f126833505ea13fd2c4fb2227ddd0f6b3aa942f8e1c815a6260432b3b899ee776a1c5e1875989b62548f13056d86defb5bc172384ac2ef6dc3f3cb2ab9be91926ab32e0376818e99ce7789384ad2466b5aab6b10e14f9202e76157198faac65c857b065702835290aa92d2f04622bbe8db0152f3920ae59d2e038e6e6eab42cbf8606b592304e0289b89d0f116a81f3f8ab9b954c43d0487ab5d59e7309cbe5a21e900fab2d868bbe30675701f4365aca", @typed={0x1004, 0x6b, @binary="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"}, @typed={0x4, 0x1a}, @typed={0x8, 0x37, @ipv4=@loopback}]}, 0x34cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) accept(r4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) [ 247.195609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.219015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 13:25:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 13:25:58 executing program 2: add_key(&(0x7f0000000280)='rxrpc_s\x00', 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffe) utimes(0x0, &(0x7f00000008c0)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) accept4$llc(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = socket(0x0, 0x80f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = creat(0x0, 0x408001) semget(0xffffffffffffffff, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000000)={'\x00', @ifru_addrs=@xdp={0x2c, 0x4, 0x0, 0x32}}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r4, 0x1, 0x6, @broadcast}, 0x10) [ 247.285745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.321669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:25:58 executing program 0: syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x400, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x5, 0x6, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[], 0x0}, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00\xc6\xcd\xd9\xcc\x8b\xec\xfb\x7f=\xb7\xc9\x92~\bb\xa8\xf7\xb4\xa7') 13:25:58 executing program 3: listen(0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x4, 0x0) set_mempolicy(0x4003, 0x0, 0x9) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x400, 0x80) fcntl$setstatus(r0, 0x4, 0x44000) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x10008082, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000380)={0x2}, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xa8, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x5, @mcast1, 0x10001}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0xfffffffffffffff8}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x20}}, @in6={0xa, 0x0, 0x0, @empty, 0x8000}, @in6={0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d62}]}, &(0x7f0000000440)=0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x20, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000280)='veth1_to_team\x00', 0x5, 0x1ff, 0x100000001}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x42) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580), 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xc2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x9, 0x8, 0x1, 0x44030000000000, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) setns(r0, 0x8000000) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x34) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) [ 247.476236] audit: type=1804 audit(1551965158.306:31): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir101283238/syzkaller.hJz1od/4/bus" dev="sda1" ino=16552 res=1 13:25:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) [ 247.556881] 9pnet_virtio: no channels available for device ./file1 13:25:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000940)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100009ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x550b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) setsockopt$inet_opts(r2, 0x0, 0x4000000000d, &(0x7f0000000480)="43cf9db30346ba28", 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2b, 0x15, 0x11, 0xc, 0xa, 0x1000080000080, 0x1, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000280)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x85, 0x2, 0x7fff, 0xffffffffffffff81, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r6, 0x6}, 0x8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x430000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) 13:25:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x4a0000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x337) setpgid(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) removexattr(&(0x7f0000000240)='./control\x00', 0x0) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3f1ddb4becc8395e454ffc4d97ac6873cba5d0a29867738377613b41718c76c73194fd0d5908311359ee8546521ffe89200a0ba0bfd7cb8678853a18160deb13db0b6fdbeb640dc5c85cc2c58ea9adc78185f258c40cc3cfbd2ecb0e30d17b7a900b6d7b28cd1d7d09f50669725a65be446ce1d2f034e349cc21d850e8b5b56a9aed"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) write$sndseq(r1, 0x0, 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') gettid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 247.593988] audit: type=1800 audit(1551965158.306:32): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16552 res=0 13:25:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 13:25:58 executing program 3: socketpair(0x1, 0x8dee2f65e4424d47, 0x1fd, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000300)='gre0\x00') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 13:25:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:25:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000940)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100009ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x550b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) setsockopt$inet_opts(r2, 0x0, 0x4000000000d, &(0x7f0000000480)="43cf9db30346ba28", 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2b, 0x15, 0x11, 0xc, 0xa, 0x1000080000080, 0x1, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000280)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x85, 0x2, 0x7fff, 0xffffffffffffff81, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r6, 0x6}, 0x8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x430000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) 13:25:59 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) memfd_create(0x0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000001) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x4a, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$usbmon(0x0, 0x40, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000380)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x149]}}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)) setfsgid(0x0) r2 = syz_open_pts(r0, 0x0) flock(r2, 0x4) getpeername$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x40, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 'netdevsim0\x00'}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) 13:25:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 248.286024] audit: type=1804 audit(1551965159.116:33): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir101283238/syzkaller.hJz1od/4/bus" dev="sda1" ino=16552 res=1 [ 248.326177] 9pnet_virtio: no channels available for device ./file1 [ 248.510181] audit: type=1804 audit(1551965159.336:34): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir101283238/syzkaller.hJz1od/4/bus" dev="sda1" ino=16552 res=1 13:25:59 executing program 2: add_key(&(0x7f0000000280)='rxrpc_s\x00', 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffe) utimes(0x0, &(0x7f00000008c0)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) accept4$llc(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = socket(0x0, 0x80f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = creat(0x0, 0x408001) semget(0xffffffffffffffff, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000000)={'\x00', @ifru_addrs=@xdp={0x2c, 0x4, 0x0, 0x32}}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r4, 0x1, 0x6, @broadcast}, 0x10) 13:25:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x4a0000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x337) setpgid(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) removexattr(&(0x7f0000000240)='./control\x00', 0x0) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="3f1ddb4becc8395e454ffc4d97ac6873cba5d0a29867738377613b41718c76c73194fd0d5908311359ee8546521ffe89200a0ba0bfd7cb8678853a18160deb13db0b6fdbeb640dc5c85cc2c58ea9adc78185f258c40cc3cfbd2ecb0e30d17b7a900b6d7b28cd1d7d09f50669725a65be446ce1d2f034e349cc21d850e8b5b56a9aed"], &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) write$sndseq(r1, 0x0, 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') gettid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:25:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 248.551876] audit: type=1800 audit(1551965159.366:35): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16552 res=0 13:25:59 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000500)='/dev/admmidi#\x00', 0x3, 0x81) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x7fffffff, 0x4}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0x200, 0x8, 0x80000001, 0x0, 0x2}, &(0x7f0000000680)=0x98) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000180)={[], 0x6e6c, 0x0, 0xffff, 0x0, 0x7, 0x1000, 0x17000, [], 0x1}) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000340)) seccomp(0x1, 0x7, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000400)={0x800, {{0x2, 0x4e23, @local}}}, 0x88) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xaca, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x1}, 0x0, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000004c0)={0x9, 0x1ff, 0x9, 0x1ff, 0x6, 0x5}) write$P9_RMKDIR(r3, &(0x7f0000000740)={0x14, 0x49, 0x1, {0x20, 0x4}}, 0x14) accept$netrom(r3, 0x0, &(0x7f0000000380)) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f00000003c0)=0xff) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x4e22, @rand_addr=0x3ff}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0xfffffffffffffff8, 0x4) [ 248.671071] audit: type=1804 audit(1551965159.506:36): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir101283238/syzkaller.hJz1od/5/bus" dev="sda1" ino=16549 res=1 13:25:59 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r0) 13:25:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000940)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100009ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x550b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) setsockopt$inet_opts(r2, 0x0, 0x4000000000d, &(0x7f0000000480)="43cf9db30346ba28", 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2b, 0x15, 0x11, 0xc, 0xa, 0x1000080000080, 0x1, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000280)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x85, 0x2, 0x7fff, 0xffffffffffffff81, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r6, 0x6}, 0x8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x430000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) [ 248.717987] audit: type=1800 audit(1551965159.506:37): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16549 res=0 13:25:59 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r0) 13:25:59 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r0) 13:25:59 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) memfd_create(0x0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000001) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x4a, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$usbmon(0x0, 0x40, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000380)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x149]}}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)) setfsgid(0x0) r2 = syz_open_pts(r0, 0x0) flock(r2, 0x4) getpeername$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x40, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 'netdevsim0\x00'}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) 13:25:59 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000c6d000/0x4000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000d21000/0x2000)=nil, &(0x7f0000d75000/0x3000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x82, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x5, 0xffffffff, 0x3f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.100764] protocol 88fb is buggy, dev hsr_slave_0 [ 249.106034] protocol 88fb is buggy, dev hsr_slave_1 [ 249.118791] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 13:26:00 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1f, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x40000010}) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0145401, &(0x7f00000001c0)={{0x3, 0x0, 0x20}}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x0) 13:26:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 249.340347] protocol 88fb is buggy, dev hsr_slave_0 [ 249.345469] protocol 88fb is buggy, dev hsr_slave_1 13:26:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x8000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0x7) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x20800) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) 13:26:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:26:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:00 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000500)='/dev/admmidi#\x00', 0x3, 0x81) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x7fffffff, 0x4}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0x200, 0x8, 0x80000001, 0x0, 0x2}, &(0x7f0000000680)=0x98) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000180)={[], 0x6e6c, 0x0, 0xffff, 0x0, 0x7, 0x1000, 0x17000, [], 0x1}) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000340)) seccomp(0x1, 0x7, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000400)={0x800, {{0x2, 0x4e23, @local}}}, 0x88) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xaca, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x1}, 0x0, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000004c0)={0x9, 0x1ff, 0x9, 0x1ff, 0x6, 0x5}) write$P9_RMKDIR(r3, &(0x7f0000000740)={0x14, 0x49, 0x1, {0x20, 0x4}}, 0x14) accept$netrom(r3, 0x0, &(0x7f0000000380)) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f00000003c0)=0xff) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x4e22, @rand_addr=0x3ff}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0xfffffffffffffff8, 0x4) 13:26:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x101000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}) 13:26:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 249.575064] binder: 7883:7886 ioctl c018620c 20000000 returned -1 13:26:00 executing program 5: r0 = socket(0x40000000015, 0x8000080000, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000002c0)={"ad45d6f843404eff4d7380cda907e564718b2cfddd7991744c6bad7b23fa952adfe30b1fb1f7a07e7c473631bd73e42ce84fc75c0053d9f49c31c0f22ec973b07ffb0c801a5c3706fe60b54a7810fe77237bf337fed5be630efe0220883e71fe7c4b2565f2640d432b4fde5f40101da7228b1ea6b5f31fd96d0d762b86be04f469036ce73890c8878106a777d3a763f234f0d4567c30e36e66531c71a375ccad6959874eff15c16f5794d48d393a1c7d119406aa77ffd46384c03aacb5bc552fee9c0231c9f2e7992d150a4273ec182825561336d63b2cd400b860ab2940b2eec34e4fb24db6a40d2cdb81102269e03844bd3fcc5a7aec07430d28e502700e9ac3733678f0b27102d7029f1b09e05c4eb68b6c1d6aaff67bd46fd0a5242a285c6afaef29023517025a95159af4c3aaf9183eb650266a4321b57e540032d3aa3a13df3f3fc2384a6d929f0f49b26fc27aed075c4456df5c5e7fbd6bea33a787b8c163fe9022bc169569fce6218261242cb088e154d6ce87f322903dab0e23f1613567f69a242e1399fedeb8feda495cb2520a84921dcc4251ab833703001f3ca05fc4db87708db3ab7f8603e2ce1c286a9e2bee5c70cc8f859d2e0095a399b3a7ec4897f01520696b981a2e5389e521e03e43c2a048adaf70ecbe20735f833b408c49cbc3883a85dec089d5665c3cfe599a143422cc586954d71cdaccc00bf734fbbe97f86c7af39d072f3baf659c1742090f0c62e6478d289431fa9a8c81486a12b679d51bed7383ab1eff57ee2d42a00452a8c20da64d79f8609e1607d1396980286fb4b9e5d1368811e0226035dcbc2432c4c756a3ab35f7b1cf5c83a0cf6fbfc3ffa084a4deaad1008b15f1190cf943ed61dc09b33062001678091b178b030fbca7924b764d033b59c2fb1ff34fdab0fdc4f6eefd23b0cbbed0e7c84df9dbad5f8b9eee54d241b261cdaf14fe965f1b52fbda5c2ff1c1a981a78b21401aa4b5c490e0c17e10bbd57b8d41a5c041d6330bee4de334f9d7780e46b5128eda8be4ab2afb31113431769436f31bc2756f3160a047f36ca8eb31ddfb79dc28e967b3226234378ec8c0e9aca91307dc8909c802680ff841de775e42dbf06cbacb06de0b40d655cee0ba3e9e736e87a4aa6ec126ed501048c2733c0cca2898a01c06ef5405f579b2b379557a71c17fe7097e26bff5ca2ea5ed1443b0f6e3926fcfa0305aaab579c7a5833897cdd93ddfef85fb2ce16a4f7a20b319a1a5b03f197576f33317641120b68af815b16cccc611a442c50ccefc8e9802828f59f4ceca2d63b9ef3c872f386bb550da0782578ac8e6e20aa3e17d4bb351fe1e4b01579bb657c31ae21d9673c45abe90a32aec456cca2d971866af4971324c12279c649721773e29a5137bf7cef7b5310c20fe6e402c95683d48c77362dfb4ae9736125863d5"}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7cf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3e, &(0x7f0000000040)=0x5, 0x4) 13:26:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x107) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @speck128}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000007c0)) 13:26:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400040, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x1000000100004000) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x100, 0x2f6636cae7aba3c7) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x4, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000300)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 13:26:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)=""/77}, {&(0x7f0000000200)=""/132}, {&(0x7f00000002c0)=""/96}, {&(0x7f0000000340)=""/47}, {&(0x7f0000000380)=""/119}, {&(0x7f0000000400)=""/150}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000580)=""/74}], 0x10000204, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x100000000000000) 13:26:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde9b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92000432d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d5224b883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0x1000}, 0x1006) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x400, &(0x7f0000000380)={'trans=unix,', {[{@privport='privport'}], [{@audit='audit'}, {@seclabel='seclabel'}]}}) truncate(&(0x7f0000000500)='./bus\x00', 0x200) sendmsg(0xffffffffffffffff, 0x0, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) sendfile(r1, r1, &(0x7f00000000c0)=0x1a7, 0x808100000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:26:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipddp0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002540)={0x0, @multicast1, @initdev}, &(0x7f0000002580)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002600)=0x14, 0x800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002740)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006980)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000069c0)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006fc0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000007240)={{{@in6=@ipv4={[], [], @initdev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000007340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000007380)={@multicast2, @multicast1, 0x0}, &(0x7f00000073c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000010600)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000010700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000010740)=0x6c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000010780)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000010880)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000010a40)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000010b40)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000115c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000011600)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000011bc0)={'bond_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000011c80)={@rand_addr, @multicast1, 0x0}, &(0x7f0000011cc0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000011d40)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000011dc0)={'bpq0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000011e00)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000011f00)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000011f40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000011f80)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4}}, &(0x7f0000012080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000120c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000121c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000012200)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000012240)={@initdev, @loopback, 0x0}, &(0x7f0000012280)=0xc) accept4(r0, &(0x7f00000122c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000012340)=0x80, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000012640)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000012740)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000012c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000012cc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000012dc0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000012ec0)=0xe8) getsockname(r0, &(0x7f0000012fc0)=@can={0x1d, 0x0}, &(0x7f0000013040)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000139c0)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000013a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000013a40)=0x14) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000014100)={&(0x7f0000013c40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000013fc0)=[{&(0x7f0000013cc0)=""/101, 0x65}, {&(0x7f0000013d40)=""/91, 0x5b}, {&(0x7f0000013dc0)=""/33, 0x21}, {&(0x7f0000013e00)=""/155, 0x9b}, {&(0x7f0000013ec0)=""/211, 0xd3}], 0x5, &(0x7f0000014040)=""/148, 0x94}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000014200)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000014300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000014400)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000015f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000015f40)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000015f80)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000016080)=0xe8) accept4$packet(r1, &(0x7f00000160c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000016100)=0x14, 0x800) accept4$packet(0xffffffffffffff9c, &(0x7f0000016200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000016240)=0x14, 0x80800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000016280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000162c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000016300)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000016400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000019140)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000019240)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f000001a300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000001a2c0)={&(0x7f0000019280)={0x1008, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x26c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x331}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5c13}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x194, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x5, 0x7fff, 0x1}, {0xfffffffffffffffb, 0x401, 0x7, 0x800}, {0x8000, 0x2e, 0x9, 0x4}, {0x0, 0x0, 0x80000001, 0x3}, {0x10000, 0xfffffffffffffff7, 0x461a, 0x8b5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x294, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0x0, 0x0, 0x2}, {0x100000001, 0x2, 0x6, 0x5}, {0x64, 0x9, 0x17e, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x448e}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r18}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8, 0x4, 0x4, 0x2}, {0x35c, 0x20, 0x0, 0x8}, {0x8, 0x5, 0x0, 0xb6a}, {0x8000, 0x1, 0x100000000, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r19}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x3f, 0x0, 0x115f, 0x1ff}, {0x6, 0x27, 0x4, 0x800000000000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x250, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa0}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r29}, {0x1bc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x3f, 0x3f, 0xf3f}, {0xffff, 0x40, 0x7, 0xfffffffffffffffa}, {0x8, 0x1, 0x6, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r31}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x39}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r32}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}]}}, {{0x8, 0x1, r34}, {0x1d4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x3, 0x5, 0x200, 0xffffffffffff8001}, {0x9, 0x4, 0x37d8, 0x3ff}, {0x4d5b, 0x80000000, 0xfff, 0x3}, {0x1dc, 0x3, 0x0, 0xdf}, {0x7, 0x6, 0x4, 0x5}, {0x86ac, 0x10000, 0xc000000000000000, 0xcb68}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r37}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r38}}}]}}, {{0x8, 0x1, r39}, {0x23c, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7, 0x100000000, 0x81, 0xfffffffffffffffd}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r41}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r42}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x48000000000000}}, {0x8, 0x6, r43}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r44}}}]}}]}, 0x1008}, 0x1, 0x0, 0x0, 0x84}, 0x20048000) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) 13:26:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:00 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003800)=@hci, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xc1}, 0x6}, {{0x0, 0x0, &(0x7f0000005bc0)=[{0x0}, {0x0}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x6, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}, {{0x0, 0x0, &(0x7f0000006ec0), 0x0, 0x0, 0x0, 0x1000}, 0x5}, {{&(0x7f00000070c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sysfs$3(0x3) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xb) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 250.023674] 9pnet: p9_fd_create_unix (7932): problem connecting socket: ./file1: -2 [ 250.060540] protocol 88fb is buggy, dev hsr_slave_0 [ 250.065634] protocol 88fb is buggy, dev hsr_slave_1 [ 250.210709] 9pnet: p9_fd_create_unix (7943): problem connecting socket: ./file1: -2 [ 250.380953] protocol 88fb is buggy, dev hsr_slave_0 [ 250.386291] protocol 88fb is buggy, dev hsr_slave_1 13:26:01 executing program 0: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x22) fcntl$lock(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000040000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xba02000000000000}], 0x800, 0x0) 13:26:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)=""/77}, {&(0x7f0000000200)=""/132}, {&(0x7f00000002c0)=""/96}, {&(0x7f0000000340)=""/47}, {&(0x7f0000000380)=""/119}, {&(0x7f0000000400)=""/150}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000580)=""/74}], 0x10000204, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x100000000000000) 13:26:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:26:01 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x140, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000019004b01020000009ab5c31c674dd72700000000001d01000034000d00ff010000000000"], 0x28}}, 0x0) 13:26:01 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003800)=@hci, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xc1}, 0x6}, {{0x0, 0x0, &(0x7f0000005bc0)=[{0x0}, {0x0}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x6, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}, {{0x0, 0x0, &(0x7f0000006ec0), 0x0, 0x0, 0x0, 0x1000}, 0x5}, {{&(0x7f00000070c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sysfs$3(0x3) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xb) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 13:26:01 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8002, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x47, 0x80000) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000240)=0x56, 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'trans=fd,'}}, {@debug={'debug', 0x3d, 0x60000000000000}}]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x2c) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000300)) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setparam(r6, &(0x7f00000002c0)=0x3) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r5, 0x8000}, 0x8) 13:26:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x8000) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0) [ 250.869000] *** Guest State *** [ 250.889562] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:26:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 250.949628] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 250.984856] CR3 = 0x0000000000000000 13:26:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x8000) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0) 13:26:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) [ 251.022087] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 251.029639] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 251.044990] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 251.059023] XFS (loop0): Invalid superblock magic number [ 251.109155] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 251.153989] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 251.180824] protocol 88fb is buggy, dev hsr_slave_0 [ 251.186714] protocol 88fb is buggy, dev hsr_slave_1 [ 251.199880] Enabling of bearer rejected, failed to enable media [ 251.207369] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 251.256842] Enabling of bearer rejected, failed to enable media [ 251.262295] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 251.323061] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 251.341777] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 251.356977] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 251.390529] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 251.435665] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 251.481215] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 251.490084] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 251.497569] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 251.506052] Interruptibility = 00000000 ActivityState = 00000000 [ 251.539584] *** Host State *** [ 251.548490] RIP = 0xffffffff811b3ba0 RSP = 0xffff8880536078b8 [ 251.578093] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 251.585734] FSBase=00007f6b1b304700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 251.593879] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 251.600747] CR0=0000000080050033 CR3=00000000a4a8c000 CR4=00000000001426e0 [ 251.608000] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 251.631496] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 251.637698] *** Control State *** [ 251.641610] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 251.648439] EntryControls=0000d1ff ExitControls=002fefff [ 251.659510] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 251.670422] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 251.677447] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 251.702680] reason=80000021 qualification=0000000000000000 [ 251.709100] IDTVectoring: info=00000000 errcode=00000000 [ 251.723017] TSC Offset = 0xffffff77ef4eade5 [ 251.727444] EPT pointer = 0x000000009768001e 13:26:02 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3ff, 0x2800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x1, 0x8001, 0x6f4, 'queue0\x00', 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) 13:26:02 executing program 0: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x22) fcntl$lock(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000040000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xba02000000000000}], 0x800, 0x0) 13:26:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:02 executing program 2: r0 = socket$inet6(0xa, 0x1010000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x10001}}) 13:26:02 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) capset(&(0x7f0000000240)={0x399f1336, r3}, &(0x7f0000000280)={0x21, 0x6, 0x0, 0x9, 0x4a6e, 0xff}) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="33000000040000000c1000003572f57c0c82a787b71bbf80ddb1443694af3a4369d0bd4c7bc76593923ae4697b9d73c1006e4f5552e2b476bd4a8c11748e06"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'teql0\x00'}) bind$alg(r0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xffffff2e) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 13:26:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:26:02 executing program 5: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x22) fcntl$lock(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000040000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xba02000000000000}], 0x800, 0x0) 13:26:02 executing program 2: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x22) fcntl$lock(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000040000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xba02000000000000}], 0x800, 0x0) 13:26:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1) [ 252.077946] *** Guest State *** [ 252.101674] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 13:26:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1) [ 252.165642] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 252.229286] CR3 = 0x0000000000000000 [ 252.254388] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 252.299625] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 252.316411] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 252.327979] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 252.379346] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 252.402088] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 252.417447] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 252.418438] XFS (loop0): Invalid superblock magic number [ 252.429369] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 252.446678] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 252.459407] XFS (loop2): Invalid superblock magic number 13:26:03 executing program 5: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x22) fcntl$lock(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000040000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xba02000000000000}], 0x800, 0x0) 13:26:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1) [ 252.482181] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 252.537647] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 252.568527] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 252.591642] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 252.600088] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 252.613928] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 252.642507] Interruptibility = 00000000 ActivityState = 00000000 [ 252.649128] *** Host State *** [ 252.659056] RIP = 0xffffffff811b3ba0 RSP = 0xffff8880531cf8b8 [ 252.668233] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 252.684864] FSBase=00007f6b1b304700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 252.697293] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 252.723952] CR0=0000000080050033 CR3=0000000096a86000 CR4=00000000001426f0 [ 252.768908] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 252.842171] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 13:26:03 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="0300590074cce5527009a1d6ab29ddff36f12863532e3e518945ad1c6d860fdc9cc035f164c164fdfdd9daea986866583bd6a7db52f29128520bd1abab4030d323d628d857db0c87e866e18d3c00000000000000000000000000000000"]) write(r2, &(0x7f00000001c0), 0xffffffea) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x10000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpid() gettid() getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getpgid(r3) r4 = socket(0x40000000015, 0x805, 0x0) bind$inet(r4, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x114, 0x0, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x24) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0xffffff7f, 0x297ef) munmap(&(0x7f00001bf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x4000, &(0x7f0000000700)="9078080f8e29babd8ac7e5e873f3ec778dbcb74415a7e8a5b05ad2144a5bd97216f6a7a20394aa6438e750ff752d68b047e85cc67877c647c7ad48b3625617c094a7b2b2bdc82c88575dc2dea8570100000000000000ea6a1dd961f94dc471acac8f2cd8219551c09c9b5befccdeccddf594fa7d48cf40aab86eae2c02749a1666fa5fff914f1f643a9fe5fedf0000000000000000e0f840384325d204e759ddfb1ad9c20c9922c5692d74ffe1094921062c1b6ca9b7d0bf26220ee57577eef0c108f64496be429ccbf8ec3706ef02750e5355d8f42daef665eb803e95d733ee9f3e085b59b10f8b87135cc1fb064a03", 0x0, 0x0, &(0x7f0000000340)="b014c83f683600d920573ce69c6e03e63ca968056d7c22622a8ae7f9bf3a7c7d81e5e55deb27a4a0739bd941c62e7f38a54664440e96329788dc1743c3f472fd24aebd891339abcf7b6168d88636b5a28d0f186519742f3c49cf6fb9b685cac14f2d09d39da44f4772633cb7609d6e1ef2508362eeb6bf938e36811219ce4d14d923d73a049f672f1c0a7a5870167b6dd1dac4fff49d58cb035d58245317aebbc378bae83cbaf889ed") setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)) 13:26:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) [ 252.907509] *** Control State *** 13:26:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3b1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100033, &(0x7f00000001c0)=0x6f, 0xfffffffffffffe34) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 13:26:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x0, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000004c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) dup2(r4, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x1, 0x40100) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0000010000bf6d30e18b4c510e9d91dd88783f36cf2e140a3379c9e2b27cdbf35dfd153e4556650900223dbbc577fbf4fb665e9d75dbcacc22b7e70b0b31887c1591a1bd48921e1b81f19a0ca98748136eecea289e2b7369690300926144842f2a9913939dca8e9d8b660000"], 0x1}}, 0x4008000) ioctl$sock_proto_private(r5, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c") syz_open_dev$usb(&(0x7f00000006c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x80000) syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 13:26:03 executing program 5: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x22) fcntl$lock(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000040000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0xba02000000000000}], 0x800, 0x0) [ 252.982559] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 252.998256] EntryControls=0000d1ff ExitControls=002fefff [ 253.005154] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 253.057024] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 253.071142] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 253.117105] reason=80000021 qualification=0000000000000000 [ 253.146088] IDTVectoring: info=00000000 errcode=00000000 [ 253.180743] TSC Offset = 0xffffff773c0bf2ce [ 253.202397] EPT pointer = 0x000000009127901e [ 253.255517] bond0: Releasing backup interface bond_slave_1 13:26:04 executing program 3: r0 = socket(0x81000100000010, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@remote, @empty, @empty}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="1f0000001a0007f1fff57f020802003f0000010053d6445f89390836be381b", 0x1f) 13:26:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 13:26:04 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f00000002c0)={0x20071026, r1}, &(0x7f0000000300)={0xbdfd, 0x4, 0x7, 0x7, 0x4, 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000240)={0x3, 0x4}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r6 = getegid() sendto$inet(r4, &(0x7f0000000440)="d2215d8bbf4726cf7953ec79a657a77e8e183d7641fc5e5802ed2bb54c4e9dc0328c49325293e27610e13887d7fd6fb181508735636ff4c5e4300d75f5f575447f2cf336840fe0778f732bcf09041b807a05592f0524d5d09fb571f732ee6efdad33f661a72af49a427c5dea4a91ce9e0c7b3cb99217919e9ea0c1aba3e3fe2d318ecbe730089c169279b790de356db7869dae94c578957f3481670081eef79f6243e987b65ea5aa0335", 0xaa, 0x4040804, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) lchown(&(0x7f0000000080)='./file0\x00', r5, r6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='veth1_to_hsr\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x125100, 0x0) mount$9p_rdma(&(0x7f00000003c0)='127\v0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, 0x0) 13:26:04 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000001) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=0x1024) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x100, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8001, 0x3ff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000001400)={0x8, @sdr={0x38303553, 0xe0a}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) r2 = syz_open_dev$video(&(0x7f00000013c0)='/dev/video#\x00', 0x1, 0x83fe) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000080)={0xc1, "922adb6e626720378b2326fa88aae2ab28865cf584518a333d1a6395fa4525f6", 0x2, 0x1}) getsockopt$inet_mreqsrc(r0, 0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000100)=0x3e1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000001300)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001340)={r4, 0x20}, &(0x7f0000001380)=0x8) [ 253.397731] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 13:26:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) [ 253.463212] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 253.495049] IPVS: ftp: loaded support on port[0] = 21 13:26:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) [ 253.585057] 9pnet_virtio: no channels available for device 127 0.0.1 13:26:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) [ 253.966156] IPVS: ftp: loaded support on port[0] = 21 [ 254.192644] 9pnet_virtio: no channels available for device 127 0.0.1 [ 254.220352] net_ratelimit: 14 callbacks suppressed [ 254.220360] protocol 88fb is buggy, dev hsr_slave_0 [ 254.230431] protocol 88fb is buggy, dev hsr_slave_1 13:26:05 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="0300590074cce5527009a1d6ab29ddff36f12863532e3e518945ad1c6d860fdc9cc035f164c164fdfdd9daea986866583bd6a7db52f29128520bd1abab4030d323d628d857db0c87e866e18d3c00000000000000000000000000000000"]) write(r2, &(0x7f00000001c0), 0xffffffea) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x10000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpid() gettid() getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getpgid(r3) r4 = socket(0x40000000015, 0x805, 0x0) bind$inet(r4, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x114, 0x0, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x24) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0xffffff7f, 0x297ef) munmap(&(0x7f00001bf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x4000, &(0x7f0000000700)="9078080f8e29babd8ac7e5e873f3ec778dbcb74415a7e8a5b05ad2144a5bd97216f6a7a20394aa6438e750ff752d68b047e85cc67877c647c7ad48b3625617c094a7b2b2bdc82c88575dc2dea8570100000000000000ea6a1dd961f94dc471acac8f2cd8219551c09c9b5befccdeccddf594fa7d48cf40aab86eae2c02749a1666fa5fff914f1f643a9fe5fedf0000000000000000e0f840384325d204e759ddfb1ad9c20c9922c5692d74ffe1094921062c1b6ca9b7d0bf26220ee57577eef0c108f64496be429ccbf8ec3706ef02750e5355d8f42daef665eb803e95d733ee9f3e085b59b10f8b87135cc1fb064a03", 0x0, 0x0, &(0x7f0000000340)="b014c83f683600d920573ce69c6e03e63ca968056d7c22622a8ae7f9bf3a7c7d81e5e55deb27a4a0739bd941c62e7f38a54664440e96329788dc1743c3f472fd24aebd891339abcf7b6168d88636b5a28d0f186519742f3c49cf6fb9b685cac14f2d09d39da44f4772633cb7609d6e1ef2508362eeb6bf938e36811219ce4d14d923d73a049f672f1c0a7a5870167b6dd1dac4fff49d58cb035d58245317aebbc378bae83cbaf889ed") setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)) 13:26:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 13:26:05 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'erspan0\x00'}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x70, 0x18, 0x100, 0x70bd29, 0x25dfdbff, "", [@nested={0x60, 0x8b, [@generic="05cc34c286cf0d8de9dea808cb60ea3741660e796378e030452b0952979503b47c4384a5b14b6a06b1b236896a81", @typed={0x8, 0x13, @str='\x00'}, @generic="1f04fde5fdadfa75655aaad3d4af1416174c112d78ccbc495eb82ee8be", @typed={0x8, 0x13, @ipv4=@multicast1}]}]}, 0x70}], 0x1, &(0x7f00000003c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x48, 0x800}, 0x800) [ 254.540639] protocol 88fb is buggy, dev hsr_slave_0 [ 254.545749] protocol 88fb is buggy, dev hsr_slave_1 [ 255.340356] protocol 88fb is buggy, dev hsr_slave_0 [ 255.345495] protocol 88fb is buggy, dev hsr_slave_1 [ 255.580320] protocol 88fb is buggy, dev hsr_slave_0 [ 255.585445] protocol 88fb is buggy, dev hsr_slave_1 [ 255.821076] protocol 88fb is buggy, dev hsr_slave_0 [ 255.826199] protocol 88fb is buggy, dev hsr_slave_1 13:26:06 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0xa8400, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xf, @vbi={0x7, 0xa9d, 0x1, 0x0, [0x1, 0x2], [0x8, 0x1], 0x1}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x40) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$int_out(r0, 0x5460, &(0x7f0000000240)) 13:26:06 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x200000, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(0x0, 0x0, 0x383) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x0, 0x8, 0x6, 0x8, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[]) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x82) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x56, 0x0, 0x2, {0x1, 0x10000}, {0x2, 0x2}, @ramp={0x1, 0x0, {0x0, 0x7fffffff, 0x3, 0x7}}}) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) bind$inet6(r2, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x1, 0x7}) 13:26:06 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'erspan0\x00'}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x70, 0x18, 0x100, 0x70bd29, 0x25dfdbff, "", [@nested={0x60, 0x8b, [@generic="05cc34c286cf0d8de9dea808cb60ea3741660e796378e030452b0952979503b47c4384a5b14b6a06b1b236896a81", @typed={0x8, 0x13, @str='\x00'}, @generic="1f04fde5fdadfa75655aaad3d4af1416174c112d78ccbc495eb82ee8be", @typed={0x8, 0x13, @ipv4=@multicast1}]}]}, 0x70}], 0x1, &(0x7f00000003c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x48, 0x800}, 0x800) 13:26:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="0300590074cce5527009a1d6ab29ddff36f12863532e3e518945ad1c6d860fdc9cc035f164c164fdfdd9daea986866583bd6a7db52f29128520bd1abab4030d323d628d857db0c87e866e18d3c00000000000000000000000000000000"]) write(r2, &(0x7f00000001c0), 0xffffffea) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x10000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpid() gettid() getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getpgid(r3) r4 = socket(0x40000000015, 0x805, 0x0) bind$inet(r4, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x114, 0x0, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x24) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0xffffff7f, 0x297ef) munmap(&(0x7f00001bf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x4000, &(0x7f0000000700)="9078080f8e29babd8ac7e5e873f3ec778dbcb74415a7e8a5b05ad2144a5bd97216f6a7a20394aa6438e750ff752d68b047e85cc67877c647c7ad48b3625617c094a7b2b2bdc82c88575dc2dea8570100000000000000ea6a1dd961f94dc471acac8f2cd8219551c09c9b5befccdeccddf594fa7d48cf40aab86eae2c02749a1666fa5fff914f1f643a9fe5fedf0000000000000000e0f840384325d204e759ddfb1ad9c20c9922c5692d74ffe1094921062c1b6ca9b7d0bf26220ee57577eef0c108f64496be429ccbf8ec3706ef02750e5355d8f42daef665eb803e95d733ee9f3e085b59b10f8b87135cc1fb064a03", 0x0, 0x0, &(0x7f0000000340)="b014c83f683600d920573ce69c6e03e63ca968056d7c22622a8ae7f9bf3a7c7d81e5e55deb27a4a0739bd941c62e7f38a54664440e96329788dc1743c3f472fd24aebd891339abcf7b6168d88636b5a28d0f186519742f3c49cf6fb9b685cac14f2d09d39da44f4772633cb7609d6e1ef2508362eeb6bf938e36811219ce4d14d923d73a049f672f1c0a7a5870167b6dd1dac4fff49d58cb035d58245317aebbc378bae83cbaf889ed") setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)) 13:26:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) fallocate(r0, 0x2000000000020, 0x0, 0xdb) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000000008005) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) accept$inet(r1, 0x0, 0x0) syncfs(r2) 13:26:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) 13:26:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={[{@fat=@tz_utc='tz=UTC'}]}) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x4, 0xffffffff}, @sack_perm, @mss={0x2, 0x91}, @timestamp, @sack_perm], 0x5) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)=':\x00', 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) mkdir(0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000004300)={'eql\x00', 0x10000803}) creat(&(0x7f0000004200)='./file0\x00', 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004240)='net/if_inet6\x00') r4 = accept4$inet(r3, 0x0, &(0x7f00000000c0), 0x80804) sendmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000004000)}, 0x7}], 0x1, 0x80) 13:26:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) [ 256.294981] audit: type=1804 audit(1551965167.126:38): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir484936206/syzkaller.kWUns9/17/bus" dev="sda1" ino=16532 res=1 [ 256.345617] FAT-fs (loop3): bogus number of reserved sectors 13:26:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) [ 256.390886] FAT-fs (loop3): Can't find a valid FAT filesystem 13:26:07 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:07 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 13:26:07 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060001081a060400040180c2000003ac1496061000002000007f000001ad42548b7c0754d31b4a40f20b507106662ebe7c523099cc0d304ad7e55b59e7d698a3279ee38db7b2696c17a7a658499695d39511519438fa8fd765387059fd54678cd8e67bb11ca76ca8ae044ad7f59d26e26145fd894e5cdab9fce30fafcc4d11d192c7b607275418f728a23d1b27008000"], 0x0) [ 256.830118] FAT-fs (loop3): bogus number of reserved sectors [ 256.843714] FAT-fs (loop3): Can't find a valid FAT filesystem 13:26:07 executing program 0: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) [ 257.029191] audit: type=1804 audit(1551965167.856:39): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir484936206/syzkaller.kWUns9/17/bus" dev="sda1" ino=16532 res=1 [ 257.093140] audit: type=1804 audit(1551965167.916:40): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir484936206/syzkaller.kWUns9/17/bus" dev="sda1" ino=16532 res=1 [ 257.098749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.123113] audit: type=1804 audit(1551965167.916:41): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir484936206/syzkaller.kWUns9/17/bus" dev="sda1" ino=16532 res=1 [ 257.130722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x30, r1, 0x0) write$binfmt_aout(r0, &(0x7f0000000940)={{0x1cf, 0xe14, 0xca19, 0x374, 0xae, 0x80, 0x3d, 0x8}, "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", [[], []]}, 0x31a) write$cgroup_int(r1, &(0x7f0000000300)=0x80000001, 0xfe32) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast2}, 0x6bd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x9d4e}, 0x2c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={0x0, 0xf5f}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000880)={r2, @in6={{0xa, 0x4e21, 0x100000000, @remote, 0x3ff}}, 0xa86d, 0x6, 0x7fffffff, 0x4, 0x63}, 0x98) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000dc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000740)={0x24, r3, 0x0, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x47e2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002900)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000ed7ac54ffffeccd97cd8aa3f442e1def2fa143e3d150a9"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@initdev, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) getuid() sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400410}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="78002e138a604e59dad73f2b350200000e8b040500e0cdd7f2330737aae197e3b6ed1328b8ddf29ebde41d5e4c3c53de574caad94a7083a022174d70f9b4c507b49fb3791e705f6fa343314c442b308e4cb8836b78a8b6a1ed34e39a7324670080c3e4256cf9916424677fbaac49828e53564e0f091853cdcfc17100ce6dd3ee"], 0x80}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x4, @rand_addr="c40b5e307ee12625065320cf11b9e72a", 0x7ff}], 0x1c) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000007c0)=ANY=[], 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000380)) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000680), &(0x7f0000000700)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 13:26:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={[{@fat=@tz_utc='tz=UTC'}]}) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x4, 0xffffffff}, @sack_perm, @mss={0x2, 0x91}, @timestamp, @sack_perm], 0x5) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)=':\x00', 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) mkdir(0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000004300)={'eql\x00', 0x10000803}) creat(&(0x7f0000004200)='./file0\x00', 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004240)='net/if_inet6\x00') r4 = accept4$inet(r3, 0x0, &(0x7f00000000c0), 0x80804) sendmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000004000)}, 0x7}], 0x1, 0x80) 13:26:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00') sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) 13:26:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ca819d000c2100fe000000ff4000000000000000000000fe8000000000000000000000000000aa8000907800000000333ad742"], 0x0) [ 257.326123] FAT-fs (loop3): bogus number of reserved sectors [ 257.332393] FAT-fs (loop3): Can't find a valid FAT filesystem 13:26:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:26:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={[{@fat=@tz_utc='tz=UTC'}]}) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x4, 0xffffffff}, @sack_perm, @mss={0x2, 0x91}, @timestamp, @sack_perm], 0x5) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)=':\x00', 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) mkdir(0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000004300)={'eql\x00', 0x10000803}) creat(&(0x7f0000004200)='./file0\x00', 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004240)='net/if_inet6\x00') r4 = accept4$inet(r3, 0x0, &(0x7f00000000c0), 0x80804) sendmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000004000)}, 0x7}], 0x1, 0x80) 13:26:08 executing program 0: 13:26:08 executing program 5: [ 257.601545] FAT-fs (loop3): bogus number of reserved sectors [ 257.614909] FAT-fs (loop3): Can't find a valid FAT filesystem [ 257.762081] device nr0 entered promiscuous mode [ 257.865215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:08 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) [ 258.214312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.500307] net_ratelimit: 21 callbacks suppressed [ 259.500313] protocol 88fb is buggy, dev hsr_slave_0 [ 259.510367] protocol 88fb is buggy, dev hsr_slave_1 [ 259.740311] protocol 88fb is buggy, dev hsr_slave_0 [ 259.745406] protocol 88fb is buggy, dev hsr_slave_1 13:26:10 executing program 4: 13:26:10 executing program 5: 13:26:10 executing program 0: 13:26:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={[{@fat=@tz_utc='tz=UTC'}]}) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x4, 0xffffffff}, @sack_perm, @mss={0x2, 0x91}, @timestamp, @sack_perm], 0x5) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)=':\x00', 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) mkdir(0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000004300)={'eql\x00', 0x10000803}) creat(&(0x7f0000004200)='./file0\x00', 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004240)='net/if_inet6\x00') r4 = accept4$inet(r3, 0x0, &(0x7f00000000c0), 0x80804) sendmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000002c80)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000004000)}, 0x7}], 0x1, 0x80) 13:26:10 executing program 1: 13:26:10 executing program 2: 13:26:10 executing program 5: [ 259.850412] FAT-fs (loop3): bogus number of reserved sectors [ 259.856489] FAT-fs (loop3): Can't find a valid FAT filesystem 13:26:10 executing program 2: 13:26:10 executing program 1: 13:26:10 executing program 0: 13:26:10 executing program 4: [ 259.980348] protocol 88fb is buggy, dev hsr_slave_0 [ 259.985496] protocol 88fb is buggy, dev hsr_slave_1 13:26:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:10 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) r7 = syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x100000007) r8 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r8, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(0xffffffffffffffff, 0x0, 0x0) 13:26:10 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r7, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:10 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000140)={{0x0, @empty, 0x4e22, 0x4, 'lblcr\x00', 0x22, 0x5, 0x3f}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x3, 0x8000, 0xac42}}, 0x44) [ 260.060344] protocol 88fb is buggy, dev hsr_slave_0 [ 260.065470] protocol 88fb is buggy, dev hsr_slave_1 13:26:10 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x200000, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(0x0, 0x0, 0x383) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x0, 0x8, 0x6, 0x8, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[]) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x82) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x56, 0x0, 0x2, {0x1, 0x10000}, {0x2, 0x2}, @ramp={0x1, 0x0, {0x0, 0x7fffffff, 0x3, 0x7}}}) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) bind$inet6(r2, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x1, 0x7}) 13:26:11 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="0300590074cce5527009a1d6ab29ddff36f12863532e3e518945ad1c6d860fdc9cc035f164c164fdfdd9daea986866583bd6a7db52f29128520bd1abab4030d323d628d857db0c87e866e18d3c00000000000000000000000000000000"]) write(r2, &(0x7f00000001c0), 0xffffffea) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x10000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpid() gettid() getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getpgid(r3) r4 = socket(0x40000000015, 0x805, 0x0) bind$inet(r4, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x114, 0x0, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x24) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0xffffff7f, 0x297ef) munmap(&(0x7f00001bf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x4000, &(0x7f0000000700)="9078080f8e29babd8ac7e5e873f3ec778dbcb74415a7e8a5b05ad2144a5bd97216f6a7a20394aa6438e750ff752d68b047e85cc67877c647c7ad48b3625617c094a7b2b2bdc82c88575dc2dea8570100000000000000ea6a1dd961f94dc471acac8f2cd8219551c09c9b5befccdeccddf594fa7d48cf40aab86eae2c02749a1666fa5fff914f1f643a9fe5fedf0000000000000000e0f840384325d204e759ddfb1ad9c20c9922c5692d74ffe1094921062c1b6ca9b7d0bf26220ee57577eef0c108f64496be429ccbf8ec3706ef02750e5355d8f42daef665eb803e95d733ee9f3e085b59b10f8b87135cc1fb064a03", 0x0, 0x0, &(0x7f0000000340)="b014c83f683600d920573ce69c6e03e63ca968056d7c22622a8ae7f9bf3a7c7d81e5e55deb27a4a0739bd941c62e7f38a54664440e96329788dc1743c3f472fd24aebd891339abcf7b6168d88636b5a28d0f186519742f3c49cf6fb9b685cac14f2d09d39da44f4772633cb7609d6e1ef2508362eeb6bf938e36811219ce4d14d923d73a049f672f1c0a7a5870167b6dd1dac4fff49d58cb035d58245317aebbc378bae83cbaf889ed") setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)) 13:26:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 260.336893] audit: type=1804 audit(1551965171.166:42): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir484936206/syzkaller.kWUns9/22/bus" dev="sda1" ino=16610 res=1 13:26:11 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 260.460357] protocol 88fb is buggy, dev hsr_slave_0 [ 260.465519] protocol 88fb is buggy, dev hsr_slave_1 [ 260.484465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 260.544863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 260.746852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.770741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.971061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.035696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:12 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) r7 = syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x100000007) r8 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r8, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:12 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000480)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffe0, 0x200) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x16, 0x17, 0x200001, {0xd, './file0/file0'}}, 0x16) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000600)=0x0) sched_setscheduler(r4, 0x0, &(0x7f0000000640)=0xffffffffffffd88f) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7ff, &(0x7f0000000240)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet(r8, &(0x7f00006d1fd4)="db", 0x1, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000240)="df", 0x1, 0x4000010, 0x0, 0x0) dup2(r7, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) write$cgroup_pid(r5, &(0x7f00000002c0)=r9, 0x12) 13:26:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x2, &(0x7f00000000c0)=r1) 13:26:12 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x200000, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(0x0, 0x0, 0x383) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f00000001c0)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240)={0x79, 0x5, 0x0, 0x8, 0x6, 0x8, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000287, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0xfffffffffffffffd) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100) syz_open_dev$usb(0x0, 0x5e5, 0x141) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x4002, &(0x7f0000000440)=ANY=[]) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) msgget$private(0x0, 0x82) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x56, 0x0, 0x2, {0x1, 0x10000}, {0x2, 0x2}, @ramp={0x1, 0x0, {0x0, 0x7fffffff, 0x3, 0x7}}}) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) bind$inet6(r2, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6], 0x1c) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x1, 0x7}) 13:26:12 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r7, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:12 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 261.428005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.526435] audit: type=1804 audit(1551965172.356:43): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir484936206/syzkaller.kWUns9/23/bus" dev="sda1" ino=16609 res=1 13:26:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x5421, &(0x7f00000000c0)=r1) 13:26:12 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 261.569960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:26:12 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 261.723178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:12 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:13 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) r7 = syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x100000007) r8 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r8, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x5450, &(0x7f00000000c0)=r1) 13:26:13 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0) epoll_create(0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigaction(0x37, &(0x7f0000000440)={&(0x7f00000003c0)="10cac4016815cac46191fcffc4c101e009f3672ef3460f4b063e470ff3e8c4e17e169b78e500000f70e5e00f3804b504000000c483a941a7000000004c", {}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000480)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, 0x0, 0x800000000024) rt_sigsuspend(&(0x7f0000000340), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r6 = shmget(0x2, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/4096) r7 = syz_open_dev$usbmon(&(0x7f0000001000)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x100000007) r8 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r8, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 13:26:13 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:13 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000140)={0x3, 0x3}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xdc, 0x0, 0x0, 0x65bb4d9b86d68fce) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r2, &(0x7f0000000080), 0x80000003) [ 262.412483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.419280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.500143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:26:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/75) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xd415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x1) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="a6c98c0100000400000000000000000065750ede825e45a90f3d09666e700cd4de91a1f9893770298f9523b12ed909205c7333bb937dee28d4b2921ea4f88486a91c8275dd4b26916a0dc38b518cdf620900edbb78b7559414d055deb4357df02d2eed24a7c271b3c3003b2cbdae69c72000007e02000000710e13"], 0x7b) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)) 13:26:13 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x5451, &(0x7f00000000c0)=r1) 13:26:13 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xffffffff00000001, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgid(0x0) r2 = fcntl$getown(r0, 0x9) syz_open_procfs(r2, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2000) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000002c0)={0x37, "b086d0f9447716f47a769e53678f053e854ff99d7df437639c797d090c9cb1b9bba5085d2a939d2c5d3c398c0a80b24862c55de983a98bd53f852f5d6f7116bcff86d00f946249c56911f0c4b9676aa8867ea827dd1356d70ecdf2e697ca3b3614ad18c2d51525fe3e1f28cd6c81fc2d5305351a215e2e0e50d8e007eb62fca9"}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x7, 0x6}) fallocate(r8, 0x2, 0x0, 0x81) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x7fffffff) syz_open_dev$loop(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) 13:26:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getdents(r2, &(0x7f00000002c0)=""/203, 0xcb) 13:26:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x5452, &(0x7f00000000c0)=r1) 13:26:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") r1 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:13 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x7, 0x10, &(0x7f0000ffe000/0x2000)=nil, 0x10001}) sendto$inet6(r2, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={0x1}, 0x8) 13:26:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x5460, &(0x7f00000000c0)=r1) 13:26:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0x25d) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10) mq_open(&(0x7f0000000040)='#mime_typevmnet0\'vboxnet1bdev\x00', 0x80, 0xc, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x8, 0x6, 0x4, 0x2, 0x2}) 13:26:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:14 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000e05000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x2, 0x0, 0x8, 0xfff, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x7ff, @mcast1, 0x2}}, 0x4, 0xffffffff, 0x76a, 0x9, 0x8}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) move_pages(r3, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000000c0)=[0x1, 0x1], &(0x7f0000000100), 0x0) 13:26:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") r1 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:14 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xffffffff00000001, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgid(0x0) r2 = fcntl$getown(r0, 0x9) syz_open_procfs(r2, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2000) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000002c0)={0x37, "b086d0f9447716f47a769e53678f053e854ff99d7df437639c797d090c9cb1b9bba5085d2a939d2c5d3c398c0a80b24862c55de983a98bd53f852f5d6f7116bcff86d00f946249c56911f0c4b9676aa8867ea827dd1356d70ecdf2e697ca3b3614ad18c2d51525fe3e1f28cd6c81fc2d5305351a215e2e0e50d8e007eb62fca9"}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x7, 0x6}) fallocate(r8, 0x2, 0x0, 0x81) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x7fffffff) syz_open_dev$loop(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) 13:26:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0xaf01, &(0x7f00000000c0)=r1) 13:26:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") r1 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:14 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x260000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000200)="7a95bc03237d4ed4fa1449fe23c72505f7eabd8fa1ac3e59a8d48184209efd5dd6df8c8fe08be25d37c642c17d90b5f1ed6b3c8bd334c5c92e52729fd514656544cc46a6b478eb0a592e3375750513eb834c365f66c926218e788b307f94ae463970cdc58e7c176769ff298f5dbff790dd61551b3a28c4c3938890c4070a91602b17083b072eabe0e17c096f061c55d83d4d92e059bf3c9030249654a0d02d0188a57930fabc1455442f27582cbd056d766c6a8d880c8fdfc40ee4e106ee38aff177965da9ea42d6b216d09d3d48d0a2fc1aa9d25611c54ccccabce6325ab974eac81bf1c8c33bf6315a375f72399b8f72154ea79b54e14cb600fe8d", 0xfc}, {&(0x7f0000000300)="4ab51b017ae1f21642a2f99d4ff183baefa31fd663a4fb0fc3", 0x19}, {&(0x7f0000000340)="217d9ea8513f89d095cd1d59546cdfbd285f234fee0e604d2e7a38213f15230036ac3ad677f8c58f7e49e5d24f580983e4274cb08f837306a1635ecfbeb7f6f30dc333ee0a993e05745ee4282bbefe325b88791a4b91d0fc8542a644dbf2a1a1f26c88580e939f8cfead14061d71b58980f150804e6d38fe77421f98fc6a94ee250ac4b5140fb1fa9b0cd12ae43986e3ce094bc1cbc1d5f6479929ef782283632aff6cf856cc0230e8e310517680ef52c595446f7caeeec88d14e34c8a7236a204e9c0c31ad3ff8d906e96b137c44aea", 0xd0}, {&(0x7f0000000440)="8d186ffdeb2ff4b7304f8ed9fa26cc0b17dbcaf2cc81746a4965a738c6138d2ba495416dc8e5544d89120320c707832b89ac3af8d47f42495563151664fc7bfbe1c1d74871db9a80f3d56fb056700b12cc155e8019653edb3bfe4d5d4bf244a81ed2b8ef5dc731ca1fd0a84cb98097f4482a243f762a1eb232c9d300f417d5e939e5f557cda6209c3ed000408252fa86d6f12a1d60dc1125047ca134631e82217a4579cf2a5f3373de3570e3555f9557b6c41bb3dfb3f02d29f22a9e0a632b1daf39614610606532f3b95dc5b66362b892fa3c8e9b84c4b09059774b12c0e9", 0xdf}, {&(0x7f0000000540)="b8221e6b10a7d4e4ff10b35acf27a59b93b72ad0bbbfc32d067ca6a8213e98006866e0e64faa27e25c5a9f8bbab8e116bde82ee6ec080c747eb63227e4d1788e47347f558d034a0e738b1acd01c6da960cd8cb72d097243c28d4be045054cd85c6e4cb2b900895212dd2fd97573570cc8af33a3a9ed5762530a710c9aaa6a13e2aac27b4b92028f2ff4beb93bb5df2d3edb96a3eba480dc1c9459cab0352e3ec4afba31b252d75064ea42272b57e3a786ec6ec9ac479f1aaafbd68e2754a74e551774cdb1532651aa0a26a0f595899720b094d7345", 0xd5}, {&(0x7f0000000640)="3ef4c87dab45e6393821554311bfece0e81eabce971928497766bb6f458d5eb2b78f203fdc7d0324cb3813de2b098c83fa193e7f4941", 0x36}, {&(0x7f0000000680)="4421cc7f17c5469a8891a4ab507513d3912e6cef54bc2ec2f5a1b06dd653a8b16202ecb87a8f60684028a9d77b83a2ebb330c70fdb802ff8e2e03193dc284590781c6365de79cafdc650b01170428984d565e0551d219673cad8a7c5136ea18554743ac14240596c17bd8777e54de0ca75232ef2", 0x74}, {&(0x7f0000000700)="ff2aceddd4", 0x5}, {&(0x7f0000000740)="30f72d9c1f0385cf2bc65e78be5ff23441b69fbf8b445a10e2914d20d68cfe1ee51e7ae6647a908b1db3a19e6d973f12c1e0a1861bb84f615b062e74f44160d2656adc8ab75030b277eb94afb7772b516269d07f3e64d66a83f8746071f46f0b79af4c73f54389c0e1dc35", 0x6b}], 0x9, &(0x7f0000000000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d}}], 0x20}, 0x1) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:26:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x40049409, &(0x7f00000000c0)=r1) 13:26:14 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x7, 0x10, &(0x7f0000ffe000/0x2000)=nil, 0x10001}) sendto$inet6(r2, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={0x1}, 0x8) 13:26:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") r1 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:14 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r0 = socket(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000004c0)='cmdgine\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r5 = epoll_create(0x5) r6 = msgget(0x0, 0x104) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000500)=""/77) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r0, &(0x7f00000000c0)={r5, r0, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'}) socket$l2tp(0x18, 0x1, 0x1) getpid() kexec_load(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x2, 0x2) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x0) epoll_create1(0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10190804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x11c, r8, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xb}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x845}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x11c}}, 0x4000040) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80880}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x34}}, 0x4040000) 13:26:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af61, &(0x7f00000000c0)=r1) 13:26:14 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xffffffff00000001, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgid(0x0) r2 = fcntl$getown(r0, 0x9) syz_open_procfs(r2, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2000) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000002c0)={0x37, "b086d0f9447716f47a769e53678f053e854ff99d7df437639c797d090c9cb1b9bba5085d2a939d2c5d3c398c0a80b24862c55de983a98bd53f852f5d6f7116bcff86d00f946249c56911f0c4b9676aa8867ea827dd1356d70ecdf2e697ca3b3614ad18c2d51525fe3e1f28cd6c81fc2d5305351a215e2e0e50d8e007eb62fca9"}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x7, 0x6}) fallocate(r8, 0x2, 0x0, 0x81) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x7fffffff) syz_open_dev$loop(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) 13:26:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af00, &(0x7f00000000c0)=r1) 13:26:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:15 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x7, 0x10, &(0x7f0000ffe000/0x2000)=nil, 0x10001}) sendto$inet6(r2, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={0x1}, 0x8) [ 264.620344] net_ratelimit: 30 callbacks suppressed [ 264.620401] protocol 88fb is buggy, dev hsr_slave_0 [ 264.630520] protocol 88fb is buggy, dev hsr_slave_1 13:26:15 executing program 0: socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = eventfd2(0x4000200000000009, 0x1) set_thread_area(0xfffffffffffffffe) r3 = dup2(r2, r1) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000020c0)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000006c0)=""/166, 0xa6}], 0xa, &(0x7f0000000840)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000001840)=@isdn, 0x80, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/178, 0xb2}], 0x1}, 0x200}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/243, 0xf3}, {&(0x7f0000001b80)}], 0x3, &(0x7f0000001c00)=""/78, 0x4e}, 0x4}, {{&(0x7f0000001c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d00)=""/222, 0xde}, {&(0x7f0000001e00)=""/245, 0xf5}, {&(0x7f0000001f00)=""/89, 0x59}], 0x3, &(0x7f0000001fc0)=""/231, 0xe7}, 0xffffffffffff2566}], 0x4, 0x40010002, &(0x7f0000002200)={r4, r5+30000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002240)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000002340)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000002500)={&(0x7f0000000000), 0xc, &(0x7f00000024c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB="380100001800000029bd7000fddbdf257f000001000000000000000000000000ac1414aa0000000000000000000000004e2300f84e2000050a00a0a008000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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"], 0x138}}, 0x0) read$eventfd(r3, &(0x7f00007b0ff8), 0x8) 13:26:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f00000000c0)=r1) 13:26:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070f642f5e0ce4e022ddab0") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:15 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200000220c2, 0x4) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) sendfile(r1, r1, &(0x7f00000001c0)=0x2, 0xa198) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xb57, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x0, 0x0) io_setup(0x4, &(0x7f0000000000)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) io_setup(0x7fff, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)) 13:26:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 264.940920] protocol 88fb is buggy, dev hsr_slave_0 [ 264.946278] protocol 88fb is buggy, dev hsr_slave_1 13:26:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) 13:26:15 executing program 0: r0 = socket$isdn(0x22, 0x3, 0x23) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup3(r0, r0, 0x80000) r3 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4}, 0x8) write(r3, &(0x7f0000002000)='/', 0x1) sendfile(r3, r3, &(0x7f0000000100), 0x7f) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) connect(r1, &(0x7f00000002c0)=@ll={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) 13:26:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af04, &(0x7f00000000c0)=r1) 13:26:15 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 265.180144] FAT-fs (loop5): invalid media value (0x00) [ 265.212802] FAT-fs (loop5): Can't find a valid FAT filesystem 13:26:16 executing program 4: rt_sigtimedwait(&(0x7f0000000100), &(0x7f0000000140), 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8}) write$cgroup_int(r0, &(0x7f0000000040), 0xfd71) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x9) sendto$llc(r0, &(0x7f00000000c0), 0x0, 0x4c044, &(0x7f00000001c0)={0x1a, 0x30a, 0x7, 0x10000, 0x10000, 0x4, @random="a55e89134bd0"}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 13:26:16 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) 13:26:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af60, &(0x7f00000000c0)=r1) 13:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = semget(0x0, 0x3, 0x40) semop(r2, &(0x7f0000000000)=[{0x3, 0x2, 0x800}, {0x0, 0x9, 0x1800}, {0x1, 0x840000}], 0x3) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r4 = msgget(0x1, 0x240) getresgid(0x0, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000600)={0x40, 0x3, 0xfba4}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000200)={0x0, 0x100000000}) msgctl$MSG_INFO(r4, 0xc, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2, 0xecb91c2836fae9d5, 0x379, 0x100, r5}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="9efebb23e009593dc2e614cdca20a3c685c81f18f606a484ee54fec9d62da694d1d32b672ddeab2d4741a55328765c638cd170f78ae29a89e608162e7012817417fd175ebb4b3f3c688c8b1973326b0f94ddc36c3608f91dfd76af8048b54401186db97d6da7219c318b376febf422e09be72acca77566", 0x77, 0x8001}], 0x40040, &(0x7f0000000340)='/dev/snd/seq\x00') r6 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x400) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x303, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) fsetxattr(r1, &(0x7f0000000380)=@random={'trusted.', 'nfs4\x00'}, &(0x7f00000003c0)='\x00', 0x1, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x2, 0x2e0, [0x20000740, 0x0, 0x0, 0x20000770, 0x200009f0], 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]}, 0x362) [ 265.740310] protocol 88fb is buggy, dev hsr_slave_0 [ 265.745428] protocol 88fb is buggy, dev hsr_slave_1 13:26:16 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200000220c2, 0x4) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) sendfile(r1, r1, &(0x7f00000001c0)=0x2, 0xa198) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xb57, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x0, 0x0) io_setup(0x4, &(0x7f0000000000)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) io_setup(0x7fff, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)) 13:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = semget(0x0, 0x3, 0x40) semop(r2, &(0x7f0000000000)=[{0x3, 0x2, 0x800}, {0x0, 0x9, 0x1800}, {0x1, 0x840000}], 0x3) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r4 = msgget(0x1, 0x240) getresgid(0x0, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000600)={0x40, 0x3, 0xfba4}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000200)={0x0, 0x100000000}) msgctl$MSG_INFO(r4, 0xc, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2, 0xecb91c2836fae9d5, 0x379, 0x100, r5}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="9efebb23e009593dc2e614cdca20a3c685c81f18f606a484ee54fec9d62da694d1d32b672ddeab2d4741a55328765c638cd170f78ae29a89e608162e7012817417fd175ebb4b3f3c688c8b1973326b0f94ddc36c3608f91dfd76af8048b54401186db97d6da7219c318b376febf422e09be72acca77566", 0x77, 0x8001}], 0x40040, &(0x7f0000000340)='/dev/snd/seq\x00') r6 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x400) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x303, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) fsetxattr(r1, &(0x7f0000000380)=@random={'trusted.', 'nfs4\x00'}, &(0x7f00000003c0)='\x00', 0x1, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x2, 0x2e0, [0x20000740, 0x0, 0x0, 0x20000770, 0x200009f0], 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]}, 0x362) 13:26:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4020940d, &(0x7f00000000c0)=r1) 13:26:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) 13:26:16 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:16 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[]}, 0x0) 13:26:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r2 = semget(0x0, 0x3, 0x40) semop(r2, &(0x7f0000000000)=[{0x3, 0x2, 0x800}, {0x0, 0x9, 0x1800}, {0x1, 0x840000}], 0x3) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r4 = msgget(0x1, 0x240) getresgid(0x0, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000600)={0x40, 0x3, 0xfba4}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000200)={0x0, 0x100000000}) msgctl$MSG_INFO(r4, 0xc, 0x0) r5 = fcntl$getown(r0, 0x9) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2, 0xecb91c2836fae9d5, 0x379, 0x100, r5}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="9efebb23e009593dc2e614cdca20a3c685c81f18f606a484ee54fec9d62da694d1d32b672ddeab2d4741a55328765c638cd170f78ae29a89e608162e7012817417fd175ebb4b3f3c688c8b1973326b0f94ddc36c3608f91dfd76af8048b54401186db97d6da7219c318b376febf422e09be72acca77566", 0x77, 0x8001}], 0x40040, &(0x7f0000000340)='/dev/snd/seq\x00') r6 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x400) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x303, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) fsetxattr(r1, &(0x7f0000000380)=@random={'trusted.', 'nfs4\x00'}, &(0x7f00000003c0)='\x00', 0x1, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x2, 0x2e0, [0x20000740, 0x0, 0x0, 0x20000770, 0x200009f0], 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000004000000000000000000feffffff020000000900000040000000803574756e6c3000000000000000000000006c6170623004000000000000000000007465616d30000000000000090000000000000000000000000000000000000000ffffffffffffffffffff00ffffffffffffffffff00ffffff0000d0000000d00000000801000061727000000000000000000000000000000000000000000000000000000000003800000000000000033f0600000a2000001d293226d6ea9cdf14141a000000ff0180c200000e0000ffffffffaaaaaaaaaaaaff00ffffff00a001000000000000736e61740000000000000000000000010001000000000000000000000000934ef9bb962d46943d1d00001000000000000000aaaaaaaaaaaa0000ffffffff00000000050000003b65413983a5bd526464703000000000000000000000687372300000000000000000000000006c6f000000000000000000000000000076657468305f746f5f6272696467650000000000000000ff00ffffffffffffffffffff00ffff00000000a00000001001000048010000706b747479706500000000000000000000000000000000000000000000000000080000000000000007010000000000006172707265706c790000000000010000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff000000006172707265706c79ded522f742294e7f000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fcffffff00000000736e6174000000000000000000000000200000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x362) 13:26:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) [ 265.980305] protocol 88fb is buggy, dev hsr_slave_0 [ 265.985410] protocol 88fb is buggy, dev hsr_slave_1 13:26:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x8008af00, &(0x7f00000000c0)=r1) 13:26:16 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) 13:26:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="857200f9ff0000000095000000e09d0004"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0xec, &(0x7f00000000c0)=""/236}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}}, &(0x7f0000000040)=0x84) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000480)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="03000e00052d0abd7b72f170c0e500000000"], 0x16) recvfrom$inet6(r0, &(0x7f0000000600)=""/4096, 0x1000, 0x20, &(0x7f0000001600)={0xa, 0x4e22, 0x9, @rand_addr="805ceb9444eb8e21024d0d5d3b937bae", 0x7b3}, 0x1c) recvfrom$inet(r0, &(0x7f0000000340)=""/251, 0xfb, 0x0, &(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10) [ 266.220300] protocol 88fb is buggy, dev hsr_slave_0 [ 266.225480] protocol 88fb is buggy, dev hsr_slave_1 [ 266.369622] FAT-fs (loop5): invalid media value (0x00) [ 266.388977] FAT-fs (loop5): Can't find a valid FAT filesystem 13:26:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000200)=@hci, 0x80) 13:26:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0xc0045878, &(0x7f00000000c0)=r1) 13:26:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) 13:26:17 executing program 1: socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:17 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8a0c"], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380), 0xb9) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x11, 0x2, r0, 0x0) 13:26:17 executing program 4: r0 = socket$inet6(0xa, 0x280002, 0x2) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)="df5a26f9440b54fa95acfadd3bba5ff9ac43b5c65ecc39365f7539c1d0dca803fdfcda9464e726322fd9b437bc541d2f9cba7cfd34c9d391ac89036d3ca8ea498e7467688d656709a1b90566effc5fddb50900717a73ab7c71d359ec3e2f51c164d11572b99669de820b882eef6dbb937b14ad3e1a26bdbed3441007ebe0e5bf0fd6a18968c089f4584f477b443dfda8e4cbf386a615c0e982e80524173b90a8f172e11ad083caa95f748301", 0xac}, {&(0x7f0000000500)="e9b7a92e8f9bfa20d45d8876a65a2a43f0fff0224d9766af90ed612dd7207d92c6702498db975a1546342f79d7f02644cf3e3e87bf89aac8d239b689b2f54d2cad7600cd63deaee02c3ff0d8b116f97c041b75a51ab6a72d6d7433f65c624e4bcbb28217a8374916a380a9a784829a4372447c544e8c6acc64b87934b448eb9eb967ce21e2d9ef80238a5c2b0369286ba2cdef9904d821ddd0903b759dd58383f58489c6284ea26d333229f791b8cb4c853c162d33ea0c4419", 0xb9}], 0x2, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, 0xffffffffffffff7b) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000000000000000000000"], 0x10}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) socket$inet6(0xa, 0x80006, 0x200) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000600)={0x5, 0x1, 0x9, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0x4, 0x9, 0xfff, 0x0, 0x8000}, @ldst={0x3, 0x2, 0x6, 0x8, 0x5, 0x20}]}, &(0x7f0000000100)='syzkaller\x00', 0xffff, 0x99, &(0x7f00000001c0)=""/153, 0x41100, 0x1, [], r1, 0xb}, 0x48) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="35c4c14b5751f5ca04000000000000000000000000000000"], 0xc}}], 0xb, 0x0) 13:26:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000707000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000a588cd97fed5b6706c1c000c00020008a409dd9a7b230f"], 0x3c}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400041, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0xc57, @local, 0x5ee}, {0xa, 0x4e20, 0x6bed, @empty, 0x6}, 0x2, [0x4, 0x0, 0x2, 0x2, 0x1ff, 0x1, 0x5, 0x8]}, 0x5c) 13:26:17 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:17 executing program 1: socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCSETAF(r0, 0x8925, &(0x7f0000000080)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x10200, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x0, 0x80000001, 0x4, 0x401}) [ 266.765803] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:26:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0xc0045878, &(0x7f00000000c0)=r1) 13:26:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 266.850641] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.933924] mkiss: ax0: crc mode is auto. 13:26:17 executing program 1: socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(r1, r0) 13:26:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x2, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 267.078073] mkiss: ax1: crc mode is auto. 13:26:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0xc0189436, &(0x7f00000000c0)=r1) 13:26:18 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8a0c"], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380), 0xb9) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x11, 0x2, r0, 0x0) 13:26:18 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, 0x0, &(0x7f0000b96000)) 13:26:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(r1, r0) 13:26:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)) 13:26:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(r1, r0) 13:26:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000300)=0x1, 0x4) fcntl$getown(r1, 0x9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x1, 0x2, {0xa, 0x4e20, 0x2, @loopback, 0x3}}}, 0x32) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:26:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0xc020660b, &(0x7f00000000c0)=r1) 13:26:18 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, 0x0, &(0x7f0000b96000)) 13:26:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5450, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(r1, r0) 13:26:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000300)=0x1, 0x4) fcntl$getown(r1, 0x9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x1, 0x2, {0xa, 0x4e20, 0x2, @loopback, 0x3}}}, 0x32) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:26:18 executing program 0: r0 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfe61) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="32cae4783d32"}, 0x14) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3888e6cc, 0x90001) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000140)={0x0, 0x200, 0x4, &(0x7f0000000100)=0xfffffffffffffff8}) sendto$inet6(r0, &(0x7f0000000040)="050300000200000000000100c52cf7c21975e697b02f08066b2b2ff0dac8897c6b11876d886b6621d8d217ccd51cc5471d130a6632a88161a6fd8f24286a07d057c3be255b33142fdd95208f", 0x4c, 0x0, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000180)={'dummy0\x00', 0x3, 0x9}) 13:26:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0xfffffffffffffbff, 0x301e, 0x1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) rt_sigqueueinfo(r3, 0x10, &(0x7f0000000140)={0x0, 0x4, 0x2bf}) 13:26:18 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, 0x0, &(0x7f0000b96000)) 13:26:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5451, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x3ff, @remote, 0x7a}, @in={0x2, 0x4e21, @rand_addr=0x1}, @in={0x2, 0x4e23, @rand_addr=0xab}, @in={0x2, 0x4e20, @broadcast}], 0x5c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xaea2, 0x0) 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5452, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:19 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), 0x0) 13:26:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200200, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x601, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x48000000000, 0x5, 0x8]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x91) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r3) 13:26:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x210008, &(0x7f0000000480)=ANY=[@ANYBLOB="82643d7116f3821f0dcafe4c052874a4611a16b4426a74f72c3939562c58b9298c8314c824130b54523b556b894b237bfecd8d94c0f95e", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030313530302dc563df30302c75736572", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',blksize=0x0000000000000200,blksize=0x0000000000001000,max_read=0x0000000000000002,default_permissions,default_permissions,max_read=0x0000000000000001,\x00']) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 13:26:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x846, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/dev\x00') mprotect(&(0x7f0000107000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000500)) dup2(r0, r2) 13:26:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:19 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), 0x0) 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5460, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:19 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), 0x0) 13:26:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0xc00000000000007, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40049409, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000009c0)=0xc) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x7e, 0x4, &(0x7f0000000940)=[{&(0x7f00000000c0)="2ce84e20df1e391635a12ceb017a0693eab31103744f78ec5aa68fe13565db0f5c6f640153280919881a1b4c5217589678aa04c6a2d92a21ed043dfe0fd3748f984b28e7284bba2d824a6ada04e41a861862619aeb1b10131e60f7a0f28a8396a6c124ebdc645381cb3890f74391499739d4a05b94dca17ace8386d0c374d2bb2ce97034b2145ceb39682d94e35006c098c9959c1b3ba200917bb0e91ca0c16aa1aec2a7547f0856deec9bc1bea5a0129147331388ab4ed0f9eeb861cc08723987af01bcfcc328d3fa8c3acf12935d0b52", 0xd1, 0x7f}, {&(0x7f0000000700)="3c4e11d06bff8b8708ac47758879d16e546f635b0dfb476f2b607f97fdc45b0d8b4a9d25097146b70659892d5c4fe153212b47c9736e7154aecbb94ebfb105eb1e065af505ada4e9da660114bd1701265f0faea61b41655e29c0e0dc1f4692f22c3991da2004b79d2ba97ec22316411fcb0581bc5413dd26340bdd788bb25295715759ad21ec33b2fd9a74f22219e0256ec24744522466d5345b510ef252070946ca0ad5e9ce234f8e1bf4c752939609ad8ac0ad8d2d3bcf8747f506273ccf26a7d834d78b74a0368024b4311b89bdf75cdcbb4ac227d7f9727a91434867987deaaa43fdbaa788c79e0c650d6d2241a3", 0xf0, 0x1}, {&(0x7f0000000800)="d94ec737b81146760611d858dc4da5671e3fffa5c34a7a9d443f5b9e40fd5499d6d3ef306ecc916e3e09537f38b0310e92b6a663bcf8a0aebe4dde122a8c68c81f3b8f88632f79169d92c8b5e08d2dfa4df5b58f4778e701a6717446719403ae3bcb3026cb9b2acc864fa271d74fe60081727f245d61c7844150f61d00f058cb7b67cfb3", 0x84, 0x8001}, {&(0x7f00000008c0)="8d81fb2b47142a178ec1537f8173d25f400ca045b671e9edde7dbf7007a3282354af94cbd688835b287b6d225599e2636c6179271630f41ee84098d307bd5d353c267864b7af93af34a9873a00acbd4e5da4d701d16b3fc54539e9", 0x5b, 0x9e8c}], 0x400, &(0x7f0000000a00)={[{@fat=@errors_continue='errors=continue'}, {@nodots='nodots'}], [{@dont_measure='dont_measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x3f, 0x38, 0x0, 0x77, 0x63, 0x61, 0x62, 0x66], 0x2d, [0x66, 0x35, 0x7f, 0x38], 0x2d, [0x3f, 0x65, 0x7f, 0x34], 0x2d, [0x67, 0x73], 0x2d, [0x62, 0x77, 0x7f, 0x36, 0x31, 0x75, 0x75, 0x31]}}}, {@pcr={'pcr', 0x3d, 0x9}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz0\x00', {0x0, 0x3, 0xd1, 0x9}, 0x3b, [0x4, 0x0, 0x7, 0xffffffffffff991f, 0x9, 0x80000000, 0x4, 0x100, 0xbfd3, 0x0, 0x2, 0xff, 0x3, 0x1, 0x5, 0x800, 0x0, 0x80000001, 0x6, 0x2, 0x400, 0x3f, 0x7, 0x5f5c, 0x1, 0x0, 0x20, 0x1f, 0x6, 0xeb8, 0x8000, 0x2, 0x3, 0x5, 0x800, 0x20, 0xf64, 0x81, 0x1fc6, 0x0, 0x2, 0x10001, 0x9, 0x9, 0x1ff, 0x31c, 0x6, 0x5, 0xfffffffffffffffb, 0x4, 0x9, 0x5, 0x1f, 0x800, 0x7fff, 0xd1fd, 0x0, 0x10001, 0x100000000, 0x7, 0x6, 0x4, 0x6, 0x9], [0x1382, 0x3, 0x10001, 0x401, 0x9, 0x7, 0x200, 0x8, 0x6, 0xffffffff, 0xad, 0x7fffffff, 0x100000000, 0x3ff, 0xffff, 0x925, 0x8, 0x2, 0x1f, 0xffffffff80000000, 0x10000, 0x7fffffff, 0x50, 0x5, 0x20, 0x3, 0x6, 0x7fffffff, 0x6, 0x6, 0x2, 0x3ff, 0x8001, 0xc8, 0x3, 0x2, 0x4, 0xfff, 0x8000, 0x8, 0x400, 0x9, 0x5, 0x800, 0x8f2, 0x2, 0x8, 0xffff, 0x1, 0x100000000, 0x10000, 0x7, 0x8000, 0x280000000000, 0x0, 0x4, 0x0, 0x6, 0xe278, 0x7, 0x8, 0xff, 0x8, 0xba68], [0xfffffffffffffffe, 0x2, 0x2, 0x8, 0xffffffffffffffff, 0x7fffffff0, 0xffffffff00000001, 0x8, 0x10000000, 0x72, 0xa6, 0x7, 0x9, 0xfffffffffffffffd, 0x1f, 0x20, 0x9, 0xfa19, 0x5a1dfc9a, 0x8, 0x0, 0x3, 0x530af64f, 0xf9, 0xe0a0, 0x15ae, 0x100, 0x2, 0x1f, 0x9, 0x71e, 0x7fffffff, 0x0, 0x5d16, 0x200, 0xeb, 0x2, 0xffffffffffffff01, 0x3, 0xfffffffffffffe00, 0xc000000000000000, 0x66c, 0x5, 0x4, 0x6, 0x9, 0x3, 0x80, 0x7d1, 0x1, 0x0, 0xbf8, 0x7, 0xffffffffffff5d63, 0x3, 0x7ff, 0x2, 0x80, 0x7, 0x0, 0x5, 0x5, 0x1, 0x3ff], [0x5, 0xfffffffffffffffa, 0x30ea, 0x1, 0x1000, 0x4, 0x1000, 0xfffffffffffffffa, 0x1, 0x8000, 0x1ff, 0x6, 0x3f, 0x5, 0x8, 0x9, 0xffffffffffff1512, 0x0, 0x1ff, 0x9, 0x9, 0x36d8, 0x7, 0x4, 0x2, 0x3f, 0xffffffffffff0001, 0xffff, 0xfff, 0x3, 0x1f, 0x44f53d43, 0xfffffffffffffff9, 0x0, 0x8, 0x80000000, 0x9, 0xfab, 0x8, 0x7fff, 0x3, 0x5, 0x0, 0x10000000, 0x7, 0x4, 0x5, 0x7, 0x2, 0x20, 0x69, 0x6, 0x15, 0x7fffffff, 0x100000001, 0x4, 0x9, 0x401, 0x2, 0x6, 0xec8e, 0x7f, 0x200, 0x8]}, 0x45c) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'ip6gre0\x00', 0x0}) sendto(r1, &(0x7f0000000ac0)="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", 0xff, 0x4000000, &(0x7f0000000d00)=@hci={0x1f, r4, 0x3}, 0x80) 13:26:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:19 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 268.838345] FAULT_INJECTION: forcing a failure. [ 268.838345] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 268.896289] CPU: 1 PID: 8939 Comm: syz-executor.1 Not tainted 5.0.0+ #10 [ 268.903187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.913255] Call Trace: [ 268.915964] dump_stack+0x172/0x1f0 [ 268.919739] should_fail.cold+0xa/0x15 [ 268.919761] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 268.928814] should_fail_alloc_page+0x50/0x60 [ 268.933355] __alloc_pages_nodemask+0x1a1/0x7e0 [ 268.938080] ? ima_match_policy+0x9f2/0x13d0 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{}]}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) mount$9p_virtio(&(0x7f0000000080)='syz', &(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2, &(0x7f00000008c0)={'trans=virtio,', {[{@cache_none='cache=none'}, {@access_user='access=user'}], [{@fowner_lt={'fowner<', r2}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@audit='audit'}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@dont_hash='dont_hash'}, {@appraise_type='appraise_type=imasig'}]}}) r4 = add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000480)="6a483a58a682b2d0b23bae57ae71033a1d2957ab3ded596035d28fbb376aa1922989266f7f7ec3b6f330cb41869d95efd159a743fc2c4a3713d4fb7b970a88ffb16cb092ddfb676ea793b0a651cb0c51251d8e2650ba6e68813d06e648e27395f36fe1096673861551461cbcbcaa6a6d9736f02823d04c24f73b024f379a3cd4247cbca8033283b50f8c568ec13015a44ebc9c82f3e08141fea549a8072fa12b7dbe1e667207d45080c68d6bf25da6bf", 0xb0, 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, r4) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000700)}) [ 268.942517] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 268.947601] ? kasan_check_read+0x11/0x20 [ 268.951792] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 268.957353] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 268.962903] alloc_pages_vma+0x39a/0x540 [ 268.967009] do_huge_pmd_anonymous_page+0x509/0x1710 [ 268.972155] ? __thp_get_unmapped_area+0x190/0x190 [ 268.977166] ? pmd_val+0x100/0x100 [ 268.980734] ? __lock_acquire+0x548/0x3fb0 [ 268.984990] __handle_mm_fault+0x2d50/0x3eb0 [ 268.989421] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 268.994800] ? find_held_lock+0x35/0x130 [ 268.998873] ? handle_mm_fault+0x322/0xb30 [ 269.003151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.008704] ? kasan_check_read+0x11/0x20 [ 269.012866] handle_mm_fault+0x43f/0xb30 [ 269.016999] __do_page_fault+0x5da/0xd60 [ 269.021084] do_page_fault+0x71/0x581 [ 269.024940] page_fault+0x1e/0x30 [ 269.028427] RIP: 0010:__put_user_4+0x1c/0x30 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505331, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 269.032841] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 269.051762] RSP: 0018:ffff888054707ac8 EFLAGS: 00010297 [ 269.057150] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020745ffc [ 269.064435] RDX: 0000000000000000 RSI: ffffffff819a4d23 RDI: ffff88809070066c [ 269.071712] RBP: ffff888054707dc0 R08: ffff888055222000 R09: 0000000000000002 [ 269.079007] R10: ffff8880552228a8 R11: ffff888055222000 R12: 0000000000000000 [ 269.086283] R13: 0000000000000000 R14: ffff888090700000 R15: 1ffff1100a8e0f66 13:26:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{}]}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) mount$9p_virtio(&(0x7f0000000080)='syz', &(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x2, &(0x7f00000008c0)={'trans=virtio,', {[{@cache_none='cache=none'}, {@access_user='access=user'}], [{@fowner_lt={'fowner<', r2}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@audit='audit'}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@dont_hash='dont_hash'}, {@appraise_type='appraise_type=imasig'}]}}) r4 = add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000480)="6a483a58a682b2d0b23bae57ae71033a1d2957ab3ded596035d28fbb376aa1922989266f7f7ec3b6f330cb41869d95efd159a743fc2c4a3713d4fb7b970a88ffb16cb092ddfb676ea793b0a651cb0c51251d8e2650ba6e68813d06e648e27395f36fe1096673861551461cbcbcaa6a6d9736f02823d04c24f73b024f379a3cd4247cbca8033283b50f8c568ec13015a44ebc9c82f3e08141fea549a8072fa12b7dbe1e667207d45080c68d6bf25da6bf", 0xb0, 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, r4) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00\x00\x00\x8d\xff\xff\xff\x00\x00\x00\x00\xff\xff\xff\xff\xa0\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, &(0x7f0000000700)}) 13:26:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 269.093583] ? __might_fault+0x1a3/0x1e0 [ 269.097730] ? sctp_getsockopt+0x2910/0x6741 [ 269.102153] ? __lock_acquire+0x548/0x3fb0 [ 269.106410] ? sctp_getsockopt_peeloff_common.isra.0+0x270/0x270 [ 269.112635] ? __fget+0x340/0x540 [ 269.116130] ? find_held_lock+0x35/0x130 [ 269.120205] ? __fget+0x340/0x540 [ 269.123691] ? lock_downgrade+0x880/0x880 [ 269.127891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.133447] ? kasan_check_read+0x11/0x20 [ 269.137612] ? __fget+0x367/0x540 [ 269.141118] ? ksys_dup3+0x3e0/0x3e0 [ 269.144853] ? kasan_check_write+0x14/0x20 [ 269.149202] sock_common_getsockopt+0x9a/0xe0 [ 269.153847] ? sock_common_getsockopt+0x9a/0xe0 [ 269.158531] __sys_getsockopt+0x168/0x250 [ 269.162692] ? kernel_setsockopt+0x1e0/0x1e0 [ 269.167153] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.171922] ? do_syscall_64+0x26/0x610 [ 269.175903] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.181306] ? do_syscall_64+0x26/0x610 [ 269.185305] __x64_sys_getsockopt+0xbe/0x150 [ 269.189752] do_syscall_64+0x103/0x610 [ 269.193672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.198883] RIP: 0033:0x457f29 [ 269.202095] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.221007] RSP: 002b:00007fae3d05fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 269.221022] RAX: ffffffffffffffda RBX: 00007fae3d05fc90 RCX: 0000000000457f29 [ 269.221030] RDX: 0000000000000004 RSI: 0000000000000084 RDI: 0000000000000003 13:26:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001f00007e400000000000ab049500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x9}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x50002, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:26:20 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000900)='trusted.overlay.redirect\x00', &(0x7f0000000940)='./file0\x00', 0x8, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00\x00\x00\x00\x10\x00', 0x10) sendmsg$inet_sctp(r2, &(0x7f00000008c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x401}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000180)="d0648dd6b520882bfde827791d99132d11eb4d41434473aef241d0ea3e941391ae7c941afe6e72770621fdce9ad804fa59ab14712afbbd52bfda3973cc1b537af2797e3d82f1cdf2a3442470ee30215e09fa3f71dc99e3cc0a9779b09aa1893a65a90e9545721a073a86a5eaf6964d06109b95211afa6cef9ffdbfa1c2656d84c914c5181f55c2c079380e67d4", 0x8d}, {&(0x7f0000000800)="425b8e64631f629206fe622527c5563094f1b665d1ae9f1d6920f25b44c9b419", 0x20}], 0x2, &(0x7f0000000880)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x15}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x568}}], 0x38, 0x20040805}, 0xc000) sendmsg$inet_sctp(r2, &(0x7f00000026c0)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="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", 0x5a9}], 0x1}, 0x8000) write$capi20_data(r2, &(0x7f00000000c0)={{0x10}}, 0x12) 13:26:20 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 269.221039] RBP: 000000000073bf00 R08: 0000000020b96000 R09: 0000000000000000 [ 269.221052] R10: 0000000020745ffc R11: 0000000000000246 R12: 00007fae3d0606d4 [ 269.221060] R13: 00000000004c99d8 R14: 00000000004d0378 R15: 0000000000000004 [ 269.325605] FAULT_INJECTION: forcing a failure. [ 269.325605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:26:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r2) 13:26:20 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) [ 269.395247] CPU: 1 PID: 8981 Comm: syz-executor.1 Not tainted 5.0.0+ #10 [ 269.402162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.411520] Call Trace: [ 269.414134] dump_stack+0x172/0x1f0 [ 269.417782] should_fail.cold+0xa/0x15 [ 269.421693] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 269.426877] ? ___might_sleep+0x163/0x280 [ 269.431087] should_fail_alloc_page+0x50/0x60 [ 269.435602] __alloc_pages_nodemask+0x1a1/0x7e0 [ 269.440320] ? mem_cgroup_throttle_swaprate+0x196/0x66e 13:26:20 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) [ 269.445729] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 269.450768] ? kasan_check_read+0x11/0x20 [ 269.454927] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 269.460477] alloc_pages_current+0x107/0x210 [ 269.464959] pte_alloc_one+0x1b/0x1a0 [ 269.468884] do_huge_pmd_anonymous_page+0x6f6/0x1710 [ 269.474029] ? __thp_get_unmapped_area+0x190/0x190 [ 269.480298] ? __lock_acquire+0x548/0x3fb0 [ 269.480322] __handle_mm_fault+0x2d50/0x3eb0 [ 269.488969] ? vmf_insert_mixed_mkwrite+0x40/0x40 13:26:20 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 269.493847] ? find_held_lock+0x35/0x130 [ 269.497923] ? handle_mm_fault+0x322/0xb30 [ 269.502200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.507781] ? kasan_check_read+0x11/0x20 [ 269.511943] handle_mm_fault+0x43f/0xb30 [ 269.516028] __do_page_fault+0x5da/0xd60 [ 269.520122] do_page_fault+0x71/0x581 [ 269.523945] page_fault+0x1e/0x30 [ 269.527403] RIP: 0010:__put_user_4+0x1c/0x30 [ 269.531817] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 269.550721] RSP: 0018:ffff888054707ac8 EFLAGS: 00010297 [ 269.550735] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020745ffc [ 269.550745] RDX: 0000000000000000 RSI: ffffffff819a4d23 RDI: ffff888099e01e2c [ 269.550754] RBP: ffff888054707dc0 R08: ffff8880552dc100 R09: 0000000000000002 [ 269.550764] R10: ffff8880552dc9a8 R11: ffff8880552dc100 R12: 0000000000000000 [ 269.550772] R13: 0000000000000000 R14: ffff888099e017c0 R15: 1ffff1100a8e0f66 13:26:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85323, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:20 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 269.550800] ? __might_fault+0x1a3/0x1e0 [ 269.550822] ? sctp_getsockopt+0x2910/0x6741 [ 269.563479] ? __lock_acquire+0x548/0x3fb0 [ 269.563507] ? sctp_getsockopt_peeloff_common.isra.0+0x270/0x270 [ 269.611395] ? __fget+0x340/0x540 [ 269.614859] ? find_held_lock+0x35/0x130 [ 269.618929] ? __fget+0x340/0x540 [ 269.622404] ? lock_downgrade+0x880/0x880 [ 269.626562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.632172] ? kasan_check_read+0x11/0x20 [ 269.636357] ? __fget+0x367/0x540 [ 269.639842] ? ksys_dup3+0x3e0/0x3e0 [ 269.643563] ? kasan_check_write+0x14/0x20 [ 269.647816] sock_common_getsockopt+0x9a/0xe0 [ 269.652316] ? sock_common_getsockopt+0x9a/0xe0 [ 269.657009] __sys_getsockopt+0x168/0x250 [ 269.661188] ? kernel_setsockopt+0x1e0/0x1e0 [ 269.665617] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.670383] ? do_syscall_64+0x26/0x610 [ 269.674403] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.679771] ? do_syscall_64+0x26/0x610 [ 269.683755] __x64_sys_getsockopt+0xbe/0x150 [ 269.688180] do_syscall_64+0x103/0x610 13:26:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40bc5311, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 269.692080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.697289] RIP: 0033:0x457f29 [ 269.700495] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.719398] RSP: 002b:00007fae3d05fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 269.727136] RAX: ffffffffffffffda RBX: 00007fae3d05fc90 RCX: 0000000000457f29 [ 269.727146] RDX: 0000000000000004 RSI: 0000000000000084 RDI: 0000000000000003 13:26:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x81, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000003c0)={{0x8, 0x7, 0x750, 0x23, 'syz1\x00', 0x1}, 0x0, [0x4, 0x5, 0x5, 0xfffffffffffffffb, 0x8, 0xc72, 0x4, 0x2, 0x3, 0x7c54, 0x1, 0x1ff, 0x6f805d7c, 0x4, 0x9, 0x5, 0x80, 0x8, 0xd88a, 0xf5, 0x80000001, 0x4, 0x5, 0x101, 0x9, 0x8, 0x6, 0x1000, 0x8, 0x3, 0x3f, 0x81, 0x3, 0xffff, 0x80000001, 0x5, 0x9b91, 0x3c, 0x3, 0x1, 0x2, 0xffffffff, 0x6, 0x0, 0x1ff, 0x7, 0x0, 0x4, 0x4, 0x3, 0x401, 0x200, 0x4, 0x5, 0x1f, 0x8, 0x9, 0x9, 0x1, 0xb5b4, 0x8, 0x8, 0x0, 0xd0, 0x20, 0x20, 0xfffffffffffffff9, 0x3, 0xffffffffffff7fff, 0x8, 0x5f4a, 0x3, 0xfff, 0x70b, 0x8, 0x3ff, 0x5, 0x8, 0x8, 0xffffffffffffffc0, 0x80, 0x1, 0x200, 0x1, 0x0, 0x80000000, 0x8, 0x3, 0x5, 0x1, 0xb77, 0x1, 0x200, 0x8, 0x1, 0x9, 0x4, 0x20, 0x9, 0x80000000, 0x4, 0xffffffffffffffe1, 0x8c, 0x6529d38c, 0xfffffffffffffff8, 0x0, 0x14a08392, 0x0, 0x9, 0x6, 0xff87, 0x100, 0x401, 0x7, 0x3, 0x5, 0x9, 0x0, 0x0, 0x1, 0x1, 0x800, 0x100000001, 0x18, 0x7, 0x100000000, 0xd45f, 0x5], {0x77359400}}) sendto$inet(r0, 0x0, 0x0, 0x200207fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="6321202e2f66696c65300aea205486396972100d97c042b2cd9252689db19239e8a5606e8d435bb1806b5f917ba77a9d73c005f1d65ab06dcefc57551c9d41fbc260768e93d001671f3effb1f1ef21e12e1083e3a12000000000000000e3e363d9dc1939e01432fb49132d56cd027b2e1c17a9f416e5f982e0e6a5627c7c8622d30435d28ff9ac41074a89eb0a605441116a309995c5280c53b4ba8527106e7275ab7b1b7dfc2e916adc640c7a441cb0d319c93a8c46bf6b74171178be3dc9d4069c500000000000a6524126f1fdaf7dd82c4e83ec0d0ebe5be42ed339023388576a9a57c7b60600f45e9602e1d2ea4470ece86713678f239e277019b632afc6e09aa720c7620b36940af961f0ccc0989b5d907ae86b75c3b9f26fcd4e9cdf9a941f3d3a5335b5cfa5697cbd85e5092ccf5a054450daf8a436f2ad73619bd234c67f516e8a00076381db30872f54d3d8be1c803cd3f0a3134ec8b4977cdb1f95e90d0294f2d9d53b70c425e0c0b175ffdb8a43ee659f31793971ee7b56b2141f1ea0da7f7bebc0a221234c5cf78bf9edae73082e8c2d16d443d7b0b515d7015bf19b84b305b54c202cb510ffff2158bc5e7a51432573c5d5842504bd6ac17200535a53ff3b2c8f6d88eca4a2644ac91970d1ca2db0e6361a19e9606bdaa3892320d499b2a82743d51374c501d8d0cbfa078883e070404db9f62b570ccce8c97b4734affa8da72fe3927026094ddaa41ee7b840ea941c99f795cef5e0b1d1168c2fa632a4c6262fac105eaf440cd5248bad0bf5b73a8e2d53df88e5494f982d8fe9ccba0ea6b54d397195ba248b5c4090b82857dc1f69d92a7714dc0383e2bb157d0e31cff09c2b98f55761c08cf6d32c9cdb98494d7c56187514597f7bbc438ce3b55fb08d6437746343ebd89aec4a7f863c9865e2b27008bfbc4439a8478292b291ef7979590e0583d607cb899548c98610c645cf5848f1a1ea61277852e44473db56bff0dfd6f6752cf5c30600000000000000de8ce086d58fad2967d29769b7a7770fd882505e8ab69b19fa7067c68a06a1eb32e23a79b9fa008fc3e75729acf724096b42a1d484dc5efdb00c39240c0b"], 0x312) recvmmsg(r0, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x7ff8) 13:26:20 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x349040, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x9, 0x2, 0x1, @empty, 'veth1_to_team\x00'}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x2, 0x0, &(0x7f00000000c0)) 13:26:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x2002) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3ff, 0x204000) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xf5, 0x800000000400000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x10000, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100000000101) clock_adjtime(0xfffffffffffffffb, &(0x7f0000f74f98)) sendmsg$alg(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="37d6a9f17ff4a77852d40c7b6afbe11c3c7709128d5efc69441e15542892c4287d659cf29d83a64561c786c275119bdc5a1d6a98a2e9e5b2eb3337db5ff0534d92e24b76e78a137d948ba00e226ea5", 0x4f}, {&(0x7f0000000240)="b2c12e3b81433c307ce5921036b59a264c9c1f7ca033b6cbe334cc7ab0656dfe5d3fd6ef6a1521dac66c0e21f55f5d2110", 0x31}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1048, 0x80}, 0x4000000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x7, 0x80}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001300)=0x8000) [ 269.727154] RBP: 000000000073bf00 R08: 0000000020b96000 R09: 0000000000000000 [ 269.727164] R10: 0000000020745ffc R11: 0000000000000246 R12: 00007fae3d0606d4 [ 269.727173] R13: 00000000004c99d8 R14: 00000000004d0378 R15: 0000000000000004 13:26:20 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:20 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x2, 0x1, &(0x7f0000000040)=""/67, &(0x7f0000000100)=""/43, &(0x7f0000000140)=""/223, 0x100000}) [ 269.900634] net_ratelimit: 18 callbacks suppressed [ 269.900643] protocol 88fb is buggy, dev hsr_slave_0 [ 269.910875] protocol 88fb is buggy, dev hsr_slave_1 13:26:20 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0xc00) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/9, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) shmget(0x3, 0x3000, 0x100, &(0x7f0000572000/0x3000)=nil) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) io_destroy(0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00') ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x4, 0x0) 13:26:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045300, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:20 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x1) nanosleep(&(0x7f00000001c0)={0x0, 0x989680}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x814}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1f4, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffc00}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe43f}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x81}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast1, 0xfd6}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x7f, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) 13:26:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045301, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 270.140318] protocol 88fb is buggy, dev hsr_slave_0 [ 270.145437] protocol 88fb is buggy, dev hsr_slave_1 [ 270.159050] FAULT_INJECTION: forcing a failure. [ 270.159050] name failslab, interval 1, probability 0, space 0, times 1 [ 270.220522] CPU: 0 PID: 9046 Comm: syz-executor.1 Not tainted 5.0.0+ #10 [ 270.227389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.236762] Call Trace: [ 270.239393] dump_stack+0x172/0x1f0 [ 270.243044] should_fail.cold+0xa/0x15 [ 270.246956] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 270.252083] ? ___might_sleep+0x163/0x280 [ 270.256248] __should_failslab+0x121/0x190 [ 270.260565] should_failslab+0x9/0x14 [ 270.264387] kmem_cache_alloc+0x2b2/0x6f0 [ 270.268548] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 270.274104] ptlock_alloc+0x20/0x70 [ 270.277743] pte_alloc_one+0x6d/0x1a0 [ 270.281580] do_huge_pmd_anonymous_page+0x6f6/0x1710 [ 270.286707] ? __thp_get_unmapped_area+0x190/0x190 [ 270.291661] ? __lock_acquire+0x548/0x3fb0 [ 270.295934] __handle_mm_fault+0x2d50/0x3eb0 [ 270.300368] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 270.305222] ? find_held_lock+0x35/0x130 [ 270.309294] ? handle_mm_fault+0x322/0xb30 [ 270.313558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.319105] ? kasan_check_read+0x11/0x20 [ 270.323265] handle_mm_fault+0x43f/0xb30 [ 270.327355] __do_page_fault+0x5da/0xd60 [ 270.331450] do_page_fault+0x71/0x581 [ 270.335278] page_fault+0x1e/0x30 [ 270.338741] RIP: 0010:__put_user_4+0x1c/0x30 [ 270.343155] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 270.362063] RSP: 0018:ffff888053b0fac8 EFLAGS: 00010297 [ 270.367430] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020745ffc [ 270.374718] RDX: 0000000000000000 RSI: ffffffff819a4d23 RDI: ffff88809fc53e6c [ 270.381995] RBP: ffff888053b0fdc0 R08: ffff888053be6200 R09: 0000000000000002 [ 270.389266] R10: ffff888053be6aa8 R11: ffff888053be6200 R12: 0000000000000000 [ 270.396564] R13: 0000000000000000 R14: ffff88809fc53800 R15: 1ffff1100a761f66 [ 270.403887] ? __might_fault+0x1a3/0x1e0 [ 270.407992] ? sctp_getsockopt+0x2910/0x6741 [ 270.412413] ? __lock_acquire+0x548/0x3fb0 [ 270.416661] ? sctp_getsockopt_peeloff_common.isra.0+0x270/0x270 [ 270.422818] ? __fget+0x340/0x540 [ 270.426277] ? find_held_lock+0x35/0x130 [ 270.430355] ? __fget+0x340/0x540 [ 270.433831] ? lock_downgrade+0x880/0x880 [ 270.437984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.443534] ? kasan_check_read+0x11/0x20 [ 270.447714] ? __fget+0x367/0x540 [ 270.451179] ? ksys_dup3+0x3e0/0x3e0 [ 270.454916] ? kasan_check_write+0x14/0x20 [ 270.459188] sock_common_getsockopt+0x9a/0xe0 [ 270.463696] ? sock_common_getsockopt+0x9a/0xe0 [ 270.468391] __sys_getsockopt+0x168/0x250 [ 270.472552] ? kernel_setsockopt+0x1e0/0x1e0 [ 270.476972] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 270.481767] ? do_syscall_64+0x26/0x610 [ 270.485792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.491187] ? do_syscall_64+0x26/0x610 [ 270.495182] __x64_sys_getsockopt+0xbe/0x150 [ 270.499610] do_syscall_64+0x103/0x610 [ 270.503514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.508711] RIP: 0033:0x457f29 [ 270.511928] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.530835] RSP: 002b:00007fae3d05fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 270.538549] RAX: ffffffffffffffda RBX: 00007fae3d05fc90 RCX: 0000000000457f29 [ 270.545823] RDX: 0000000000000004 RSI: 0000000000000084 RDI: 0000000000000003 [ 270.553099] RBP: 000000000073bf00 R08: 0000000020b96000 R09: 0000000000000000 [ 270.560370] R10: 0000000020745ffc R11: 0000000000000246 R12: 00007fae3d0606d4 13:26:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 270.567654] R13: 00000000004c99d8 R14: 00000000004d0378 R15: 0000000000000004 [ 270.575411] protocol 88fb is buggy, dev hsr_slave_0 [ 270.580548] protocol 88fb is buggy, dev hsr_slave_1 [ 270.585668] protocol 88fb is buggy, dev hsr_slave_0 [ 270.590784] protocol 88fb is buggy, dev hsr_slave_1 13:26:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 13:26:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 270.860323] protocol 88fb is buggy, dev hsr_slave_0 [ 270.865450] protocol 88fb is buggy, dev hsr_slave_1 13:26:21 executing program 1 (fault-call:1 fault-nth:3): r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:21 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:21 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x8a, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:22 executing program 0: r0 = socket$kcm(0x10, 0x7, 0x4) socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="39000000140081ae00003c9733f5f087110008abca9b4e7d0f6298db85d0b0e62bdbb7d553b4e921556b3d5df500c250825702000000000000", 0x39}], 0x1}, 0x0) 13:26:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x10000, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:22 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000082) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="65f336224bf63b533505b3540906a7d2b6e81417ddac3f7579a3f7cb93e001b6d9e6d0f21afb9e950595d634456ad2398d9cf8159d1ca72389318a97654cb24950e208935a4aee0ef447abda321bc89f4a4c9d2cf661f92d143117c175f632b8a069e6325f940cc851f73ce1113cd127672e64fe1c0bfba1de7a0f40b8aee9239207a9eb0180d3210f1649bebd8c702b38"], 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) geteuid() ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000140)={0x0, 0x10f, "579042248f5d70991d0d889ccaf398cedcdd8f0aa6cb120a5a61187f0dcb1f34", 0x0, 0x2}) 13:26:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:22 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0xbb, 0x4, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:22 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x2, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:22 executing program 0: setresuid(0x0, 0xfffe, 0x0) syslog(0xfffffffb, 0x0, 0x0) 13:26:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x10100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000a80)='htcp\x00', 0x5) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0xa6800) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x5, 0xfffffffffffffff8, 0x8a, 0x8d, 0xc310, 0x0, 0xffff, 0x3, 0x5, 0x6, 0x1, 0x0, 0x9, 0x585, 0x800, 0x1}}) recvmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/135, 0x87}], 0x4, &(0x7f0000000700)=""/134, 0x86}, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@remote, @in=@multicast2, 0x4e22, 0x8, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0x0, r3, r4}, {0x2, 0x40, 0x8001, 0x9, 0x2, 0x0, 0xfffffffffffffffd, 0x7fff}, {0x7fc00000, 0xfffffffffffffffe, 0x80000001, 0x444e}, 0x1ebd08b8, 0x6e6bbd, 0x2, 0x1, 0x2, 0x2}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d4, 0x33}, 0xa, @in=@remote, 0x34ff, 0x3, 0x3, 0xc7, 0x3, 0x6, 0x100000001}}, 0xe8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/hwrng\x00', 0x8000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000200)={0x0, 0x4f, 0x1, 0x0, 0x0, [{r2, 0x0, 0x2}]}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x2000, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r6) 13:26:22 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x3, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000080)={{0x3, @default}, [@bcast, @rose, @netrom, @rose, @default, @remote, @default]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000240)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, 0x80, 0x8, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:26:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000080)=""/40, &(0x7f00000000c0)=0x28) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 13:26:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc0a, 0x40000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r2) 13:26:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:22 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000080)={{0x3, @default}, [@bcast, @rose, @netrom, @rose, @default, @remote, @default]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000240)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, 0x80, 0x8, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:26:23 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x7, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:23 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x8, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:23 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x1) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0x50) write(r0, &(0x7f0000000b40)="04c14e166692f0f8b17500955310060e92aec87568838306f9b1d5a4c28f202a7612b4", 0x23) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x2, 0x30, 0x6, 0x5}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0)={r3, 0x57, "af4f19719eb83705900bde542612686cf4bef24443438d691eae35202309a2a9cde6a4293e1b06265fe4bfd7b03a18b0a77c2eafbe4bdbe0f14f15df213bc0712fe0efb4c8fd5eeaf959a6ba05862b29d3ebf186ad878d"}, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) listen(r1, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000540)={0x0, @bt={0x1, 0x9, 0x0, 0x2, 0x401, 0x0, 0x80, 0x9, 0x1, 0xfffffffffffffffa, 0x0, 0x5, 0x80, 0x3a46, 0x8, 0x30}}) memfd_create(&(0x7f0000004200)='\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x20002, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYRESHEX=r6], @ANYRESDEC=r1, @ANYRESOCT=r4], &(0x7f0000000700)=0x3) setsockopt$inet6_dccp_int(r8, 0x21, 0x11, &(0x7f0000000280)=0x3, 0x4) dup3(r1, r8, 0x80000) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xc02, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4081, 0x0) 13:26:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000080)=""/40, &(0x7f00000000c0)=0x28) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 13:26:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:23 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x9, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) 13:26:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000080)=""/40, &(0x7f00000000c0)=0x28) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 13:26:23 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xa, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getscheduler(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @local}}, 0x20, 0xb16}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0xfffffffffffff070}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x200000, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000280)={0x7, 0x4d, 0x2}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r2) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x1015, 0x5, 0x7, "adac94a51d47e745132d86f9be1a8035", "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"}, 0x1015, 0x1) ioprio_set$pid(0x2, r1, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 13:26:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:24 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xb, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:24 executing program 5: syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x3a, 0x7, @thr={&(0x7f00000001c0)="f92733a0a6b3b0146a7f6dd13ee7b5ad306b0dbb56281fafdf93c2c56827b5ca502b4191dc9e248587567b33e04b254c912cbc8cee24e67f08159583127ac748cd52923a05bd50027781547242813c330812565421a7d2de83ec751a7c554e21959c4382690d5660fc883e9ebfb51522747076606d02b13723af897cbf3cf653824302fde9e291f6160e585f6b7fff35ae7ed30ee29d1ac780cd389292af615eb2f86cd510eba989bc130161596d7adc70d966", &(0x7f0000001380)="f496f879871510d27db35a17713918b1e5e8a0a2438696d1578006c17312f4893c517b127c26406d384bd818fd6a1d843999fbc7d7936ec304f2ab81f289e742fa538c049f7e10c112a0fd0f53599c279fdcb5e7072ae4c92c4bf8cf6a75227308940464d9b8a5ae343f5a54abc35cd271a76239a6ca75f4bc1556a83d69a3eb8a3769480ad3a83c4297e0c2fbe150ecc2f7c48fadeb35fd1b850b2c428df693"}}, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000140)='net/ip6_mr_cache\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x1000) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB]) 13:26:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x103, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x10000) ioctl$int_in(r0, 0xc000108010500c, &(0x7f0000000040)) 13:26:24 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xc, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:24 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xd, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:24 executing program 0: r0 = socket(0x2, 0x10000000002, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) sendmsg$netlink(r0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x80800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) 13:26:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 274.069985] sched: DL replenish lagged too much [ 274.082899] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 274.136806] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 13:26:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r3 = socket$inet6(0xa, 0x7fd, 0x4) ioctl(r3, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x10808410, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, r6, 0x0) exit(0x0) r7 = dup2(r5, r6) mkdirat(r4, &(0x7f0000000400)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x80011, r1, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000001c0)) fcntl$getown(r8, 0x9) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000300)) gettid() [ 274.193248] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 274.227256] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 13:26:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5336, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:25 executing program 5: syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x3a, 0x7, @thr={&(0x7f00000001c0)="f92733a0a6b3b0146a7f6dd13ee7b5ad306b0dbb56281fafdf93c2c56827b5ca502b4191dc9e248587567b33e04b254c912cbc8cee24e67f08159583127ac748cd52923a05bd50027781547242813c330812565421a7d2de83ec751a7c554e21959c4382690d5660fc883e9ebfb51522747076606d02b13723af897cbf3cf653824302fde9e291f6160e585f6b7fff35ae7ed30ee29d1ac780cd389292af615eb2f86cd510eba989bc130161596d7adc70d966", &(0x7f0000001380)="f496f879871510d27db35a17713918b1e5e8a0a2438696d1578006c17312f4893c517b127c26406d384bd818fd6a1d843999fbc7d7936ec304f2ab81f289e742fa538c049f7e10c112a0fd0f53599c279fdcb5e7072ae4c92c4bf8cf6a75227308940464d9b8a5ae343f5a54abc35cd271a76239a6ca75f4bc1556a83d69a3eb8a3769480ad3a83c4297e0c2fbe150ecc2f7c48fadeb35fd1b850b2c428df693"}}, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000140)='net/ip6_mr_cache\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x1000) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB]) 13:26:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:25 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xe, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:25 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="58000000dc0000000014010000080000004d037f67d8b70d6d9789ffffffffffffff0000871709322be4c68537e918556fc5fa0d02739b3e8883256b8b71eb95dcb10dcb383bf587a2b0bb97f155e36011c57e8769315dd2"], 0x58}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000100)) 13:26:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85320, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x6f, "597eb558229521577ff970b0e239925eee88ef0894e00761be1be7ec49a3d8b5ecbe0166528782503596b881775c4b957b5c997d67b35cfcd0eec8d52242afcc4f0d7cfe99ea0a611dd136d410734a9b69bc4a11b9aa5935c577476493b281080189c963288ae52c0cda918bedddac"}, &(0x7f0000000180)=0x77) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x2}, 0x8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x22, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) [ 274.496604] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:26:25 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xf, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 274.583035] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 13:26:25 executing program 4: syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) [ 274.714170] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 275.021228] net_ratelimit: 22 callbacks suppressed [ 275.021236] protocol 88fb is buggy, dev hsr_slave_0 [ 275.031299] protocol 88fb is buggy, dev hsr_slave_1 13:26:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) getrlimit(0x0, &(0x7f0000000040)) 13:26:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x23}}, 0xfffffffffffffd82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lc\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0x3, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x2cb, 0xfa00, {0x3, &(0x7f00000003c0)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="020900000200000000c47dd31b650aad"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r6, 0xfffffffffffffefc) 13:26:26 executing program 4: syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:26 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x10, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4a2600, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cc302000000010000000000000000000a0000000000000000000000953f1a18d089a7e512774896e6bc721f468f788a1a46"], 0x170}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f00000001c0)="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") sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:26:26 executing program 4: syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:26 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'syz_tun\x00', @ifru_addrs=@can}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@multicast2, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000c80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000001c00)=0xfffffffffffffe2c) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1b, r5, 0x1, 0x80000000, 0x6, @random="3d8385daea30"}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000024c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002500)={{{@in=@dev, @in6=@dev}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000002600)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000027c0)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x105) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000002a00)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002b40)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000004500)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000005f40)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x400}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x14}, 0x3}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x1fffe00000, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0xfe000}], 0xa) [ 275.393559] bridge0: port 3(gretap0) entered blocking state 13:26:26 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x11, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x1f00, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 275.434285] bridge0: port 3(gretap0) entered disabled state 13:26:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) [ 275.539356] device gretap0 entered promiscuous mode 13:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) [ 275.584469] bridge0: port 3(gretap0) entered blocking state [ 275.590819] bridge0: port 3(gretap0) entered forwarding state 13:26:26 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x12, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x1f000000, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 275.740319] protocol 88fb is buggy, dev hsr_slave_0 [ 275.745883] protocol 88fb is buggy, dev hsr_slave_1 13:26:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x23}}, 0xfffffffffffffd82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lc\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0x3, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x2cb, 0xfa00, {0x3, &(0x7f00000003c0)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="020900000200000000c47dd31b650aad"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r6, 0xfffffffffffffefc) 13:26:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x1f00000000000000, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) 13:26:26 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x13, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:26 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r2) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'syz_tun\x00', @ifru_addrs=@can}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@multicast2, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000c80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000f00)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000001c00)=0xfffffffffffffe2c) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1b, r5, 0x1, 0x80000000, 0x6, @random="3d8385daea30"}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000024c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002500)={{{@in=@dev, @in6=@dev}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000002600)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000027c0)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x105) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000002a00)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002b40)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000004500)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000005f40)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x400}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x14}, 0x3}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x1fffe00000, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0xfe000}], 0xa) 13:26:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) 13:26:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:26 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x14, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000000000000002, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:26 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffffffffffffffff, 0x2000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x3f, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x1b, 0x8003, 0x100, 0x4, r1}, &(0x7f0000000180)=0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x400000, 0xffd4) 13:26:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x23}}, 0xfffffffffffffd82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lc\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0x3, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x2cb, 0xfa00, {0x3, &(0x7f00000003c0)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="020900000200000000c47dd31b650aad"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r6, 0xfffffffffffffefc) 13:26:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) [ 276.140349] protocol 88fb is buggy, dev hsr_slave_0 [ 276.145444] protocol 88fb is buggy, dev hsr_slave_1 13:26:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f000000, {0x0, 0x1c9c380}}) 13:26:27 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x15, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) 13:26:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x23}}, 0xfffffffffffffd82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lc\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0x3, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x2cb, 0xfa00, {0x3, &(0x7f00000003c0)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="020900000200000000c47dd31b650aad"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r6, 0xfffffffffffffefc) 13:26:27 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x16, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 276.380288] protocol 88fb is buggy, dev hsr_slave_0 [ 276.385432] protocol 88fb is buggy, dev hsr_slave_1 13:26:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00000000000000, {0x0, 0x1c9c380}}) 13:26:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) 13:26:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sco\x00') ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000100)={0x2, 0x2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000000)={0x9, 'syz1\x00'}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0xfffffffffffffffe) 13:26:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:27 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x17, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:27 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:27 executing program 0: r0 = dup(0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x104, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x96f9}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x20040, 0x400d04) lseek(r2, 0x0, 0x4) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000000000002000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="00000000e33600000000000000000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000001feffffffffffff00000000000000000000000000000000"]) 13:26:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) 13:26:27 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 276.753598] FAULT_INJECTION: forcing a failure. [ 276.753598] name failslab, interval 1, probability 0, space 0, times 0 [ 276.778264] CPU: 0 PID: 9481 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 276.785115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.794468] Call Trace: [ 276.797085] dump_stack+0x172/0x1f0 13:26:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 276.800731] should_fail.cold+0xa/0x15 [ 276.804643] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 276.809767] ? ___might_sleep+0x163/0x280 [ 276.813932] __should_failslab+0x121/0x190 [ 276.818184] should_failslab+0x9/0x14 [ 276.821996] __kmalloc+0x2dc/0x740 [ 276.825648] ? drm_ioctl+0x45c/0xa50 [ 276.829384] drm_ioctl+0x45c/0xa50 [ 276.832965] ? drm_mode_create_dumb+0x310/0x310 [ 276.837660] ? drm_version+0x3d0/0x3d0 [ 276.841596] ? smack_log+0x415/0x540 [ 276.845364] ? smk_access_entry+0x1c0/0x1c0 [ 276.849712] ? __fget+0x340/0x540 13:26:27 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x19, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 276.853170] ? smk_access+0x40d/0x570 [ 276.856979] ? find_held_lock+0x35/0x130 [ 276.861057] ? smk_tskacc+0x2ba/0x390 [ 276.864864] ? drm_version+0x3d0/0x3d0 [ 276.868766] do_vfs_ioctl+0xd6e/0x1390 [ 276.872669] ? smk_curacc+0x7f/0xa0 [ 276.876298] ? ioctl_preallocate+0x210/0x210 [ 276.880721] ? smack_file_ioctl+0x196/0x300 [ 276.885049] ? smack_file_lock+0x240/0x240 [ 276.889526] ? __fget+0x367/0x540 [ 276.893002] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 276.898622] ? fput+0x128/0x1a0 [ 276.903941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.909558] ? security_file_ioctl+0x93/0xc0 [ 276.913980] ksys_ioctl+0xab/0xd0 [ 276.917443] __x64_sys_ioctl+0x73/0xb0 [ 276.921356] do_syscall_64+0x103/0x610 [ 276.925263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.930457] RIP: 0033:0x457f29 [ 276.933654] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:26:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}}) [ 276.952560] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.960297] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 276.967581] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 276.974856] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 276.974869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 276.989405] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 276.997220] protocol 88fb is buggy, dev hsr_slave_0 [ 277.002323] protocol 88fb is buggy, dev hsr_slave_1 13:26:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) recvmsg(r1, &(0x7f0000002840)={&(0x7f0000001200)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001280)=""/177, 0xb1}, {&(0x7f0000001340)=""/78, 0x4e}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/131, 0x83}, {&(0x7f0000001540)=""/4096, 0xd73}, {&(0x7f0000002540)=""/224, 0xfffffffffffffd0c}, {&(0x7f0000002640)=""/145, 0x63}, {&(0x7f0000002700)}], 0x9, &(0x7f0000002800)=""/19, 0x13}, 0x40000003) accept$packet(r1, &(0x7f0000002940)={0x11, 0x0, 0x0}, &(0x7f0000002980)=0x14) recvmmsg(r1, &(0x7f0000007c80)=[{{&(0x7f0000005440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000007980)=[{&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/6, 0x6}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/14, 0xe}, {&(0x7f0000007540)=""/166, 0xa6}, {&(0x7f0000007600)=""/186, 0xba}, {&(0x7f00000076c0)=""/183, 0xb7}, {&(0x7f0000007780)=""/225, 0xe1}, {&(0x7f0000007880)=""/237, 0xed}], 0x9, &(0x7f0000007a40)=""/192, 0xc0}, 0x5}, {{&(0x7f0000007b00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007b80), 0x0, &(0x7f0000007bc0)=""/167, 0xa7}, 0x3ff}], 0x2, 0x2040, 0x0) sendmsg$nl_route(r1, &(0x7f0000007dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007d80)={&(0x7f0000007d00)=@ipv4_getnetconf={0x54, 0x52, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x366}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffffffffffffffe}]}, 0x54}}, 0x800) recvmmsg(r4, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/8, 0x8}, {&(0x7f00000004c0)=""/43, 0x2b}], 0xa, &(0x7f00000005c0)=""/72, 0x48}, 0xffff}, {{&(0x7f0000000640)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000780)=""/93, 0x5d}, {&(0x7f0000000800)=""/121, 0x79}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000980)=""/169, 0xa9}, 0x6}], 0x2, 0x2, &(0x7f0000000ac0)={0x0, 0x1c9c380}) 13:26:27 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:27 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/softnet_stat\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0xffffffffffff8000, 0x10001, 0x6}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x200, 0x30, 0xffffffffffffff90, 0x401}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x96d, 0x4}, 0x8) ioctl$TCXONC(r1, 0x540a, 0x2) 13:26:27 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x1f00}) 13:26:28 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 277.172305] FAULT_INJECTION: forcing a failure. [ 277.172305] name failslab, interval 1, probability 0, space 0, times 0 [ 277.264533] CPU: 0 PID: 9510 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 277.271398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.280759] Call Trace: [ 277.283376] dump_stack+0x172/0x1f0 [ 277.287034] should_fail.cold+0xa/0x15 [ 277.290966] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 277.296078] ? ___might_sleep+0x163/0x280 [ 277.300237] __should_failslab+0x121/0x190 [ 277.304473] should_failslab+0x9/0x14 [ 277.308258] kmem_cache_alloc_trace+0x2d1/0x760 [ 277.312923] ? drm_dev_exit+0x22/0x60 [ 277.316789] vkms_gem_create.part.0+0x5f/0x170 [ 277.321385] vkms_dumb_create+0x11e/0x240 [ 277.325525] drm_mode_create_dumb+0x288/0x310 [ 277.330005] drm_mode_create_dumb_ioctl+0x26/0x30 [ 277.334832] drm_ioctl_kernel+0x23b/0x2e0 [ 277.338974] ? drm_mode_create_dumb+0x310/0x310 [ 277.343658] ? drm_setversion+0x8c0/0x8c0 [ 277.347792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 277.353352] ? _copy_from_user+0xdd/0x150 [ 277.357504] drm_ioctl+0x545/0xa50 [ 277.361026] ? drm_mode_create_dumb+0x310/0x310 [ 277.365685] ? drm_version+0x3d0/0x3d0 [ 277.369555] ? smack_log+0x415/0x540 [ 277.373253] ? smk_access_entry+0x1c0/0x1c0 [ 277.377560] ? __fget+0x340/0x540 [ 277.380999] ? smk_access+0x40d/0x570 [ 277.384783] ? find_held_lock+0x35/0x130 [ 277.388828] ? smk_tskacc+0x2ba/0x390 [ 277.392618] ? drm_version+0x3d0/0x3d0 [ 277.396491] do_vfs_ioctl+0xd6e/0x1390 [ 277.400366] ? smk_curacc+0x7f/0xa0 [ 277.403980] ? ioctl_preallocate+0x210/0x210 [ 277.408381] ? smack_file_ioctl+0x196/0x300 [ 277.412718] ? smack_file_lock+0x240/0x240 [ 277.416948] ? __fget+0x367/0x540 [ 277.420397] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 277.425931] ? fput+0x128/0x1a0 [ 277.429197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.434722] ? security_file_ioctl+0x93/0xc0 [ 277.439129] ksys_ioctl+0xab/0xd0 [ 277.442584] __x64_sys_ioctl+0x73/0xb0 [ 277.446460] do_syscall_64+0x103/0x610 [ 277.450355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 277.455533] RIP: 0033:0x457f29 [ 277.458709] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.477593] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.485290] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 277.492556] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 277.499809] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.507061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 13:26:28 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1b, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x1f000000}) 13:26:28 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 277.514316] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 13:26:28 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:28 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) statx(r1, &(0x7f0000000080)='./file0\x00', 0x4000, 0xfff, &(0x7f00000000c0)) 13:26:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x1f00000000000000}) 13:26:28 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:28 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 277.766013] FAULT_INJECTION: forcing a failure. [ 277.766013] name failslab, interval 1, probability 0, space 0, times 0 [ 277.791244] CPU: 1 PID: 9553 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 277.798133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.807482] Call Trace: [ 277.807516] dump_stack+0x172/0x1f0 [ 277.807540] should_fail.cold+0xa/0x15 [ 277.813753] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 277.813779] ? ___might_sleep+0x163/0x280 [ 277.813811] __should_failslab+0x121/0x190 [ 277.813828] ? shmem_destroy_callback+0xc0/0xc0 [ 277.826935] should_failslab+0x9/0x14 [ 277.839618] kmem_cache_alloc+0x2b2/0x6f0 [ 277.843787] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 277.848754] ? shmem_destroy_callback+0xc0/0xc0 [ 277.853437] shmem_alloc_inode+0x1c/0x50 [ 277.857507] alloc_inode+0x66/0x190 [ 277.861158] new_inode_pseudo+0x19/0xf0 [ 277.865160] new_inode+0x1f/0x40 [ 277.868553] shmem_get_inode+0x84/0x780 [ 277.872535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.878564] __shmem_file_setup.part.0+0x7e/0x2b0 [ 277.883420] shmem_file_setup+0x66/0x90 [ 277.887410] drm_gem_object_init+0x3b/0xb0 [ 277.891657] vkms_gem_create.part.0+0x8d/0x170 [ 277.896253] vkms_dumb_create+0x11e/0x240 [ 277.900410] drm_mode_create_dumb+0x288/0x310 [ 277.904918] drm_mode_create_dumb_ioctl+0x26/0x30 [ 277.909770] drm_ioctl_kernel+0x23b/0x2e0 [ 277.913968] ? drm_mode_create_dumb+0x310/0x310 [ 277.918648] ? drm_setversion+0x8c0/0x8c0 [ 277.922802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 277.922819] ? _copy_from_user+0xdd/0x150 [ 277.922836] drm_ioctl+0x545/0xa50 [ 277.936054] ? drm_mode_create_dumb+0x310/0x310 [ 277.940750] ? drm_version+0x3d0/0x3d0 [ 277.945883] ? smack_log+0x415/0x540 [ 277.949621] ? smk_access_entry+0x1c0/0x1c0 [ 277.953971] ? __fget+0x340/0x540 [ 277.957436] ? smk_access+0x40d/0x570 [ 277.961248] ? find_held_lock+0x35/0x130 [ 277.965324] ? smk_tskacc+0x2ba/0x390 [ 277.969158] ? drm_version+0x3d0/0x3d0 [ 277.973062] do_vfs_ioctl+0xd6e/0x1390 [ 277.976959] ? smk_curacc+0x7f/0xa0 [ 277.980656] ? ioctl_preallocate+0x210/0x210 [ 277.985066] ? smack_file_ioctl+0x196/0x300 [ 277.989407] ? smack_file_lock+0x240/0x240 [ 277.993733] ? __fget+0x367/0x540 [ 277.997206] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 278.002753] ? fput+0x128/0x1a0 [ 278.006045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.011616] ? security_file_ioctl+0x93/0xc0 [ 278.016043] ksys_ioctl+0xab/0xd0 [ 278.016063] __x64_sys_ioctl+0x73/0xb0 [ 278.016081] do_syscall_64+0x103/0x610 [ 278.016102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.023421] RIP: 0033:0x457f29 [ 278.023437] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.023446] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:26:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x1f00}) 13:26:28 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1d, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x1f000000}) 13:26:28 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x1f00000000000000}) 13:26:28 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x21, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:28 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 278.023461] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 278.023470] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 278.023478] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.023491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 278.091402] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 13:26:29 executing program 4 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:29 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x22, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x1f00]}) 13:26:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7, 0x80000) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r1}) sendto(r1, &(0x7f0000000040)="5b384cc7d0f08436db86f3d6b59eb9", 0xf, 0x8000, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x3, 0x2, {0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x27}, 0xfffffffffffffffa}}}, 0x80) finit_module(r0, &(0x7f0000000180)='\x00', 0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r4) 13:26:29 executing program 5: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:29 executing program 0: getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x23, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 5: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 278.344308] FAULT_INJECTION: forcing a failure. [ 278.344308] name failslab, interval 1, probability 0, space 0, times 0 [ 278.369616] CPU: 1 PID: 9602 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 278.376477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.385836] Call Trace: [ 278.388437] dump_stack+0x172/0x1f0 [ 278.392091] should_fail.cold+0xa/0x15 [ 278.396002] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 278.401144] ? ___might_sleep+0x163/0x280 [ 278.405321] __should_failslab+0x121/0x190 [ 278.409627] should_failslab+0x9/0x14 [ 278.413469] kmem_cache_alloc+0x2b2/0x6f0 [ 278.417658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.423209] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 278.428294] ? map_id_range_down+0x1ee/0x370 [ 278.432810] new_inode_smack+0x20/0xb0 [ 278.436723] smack_inode_alloc_security+0x97/0x100 [ 278.441671] security_inode_alloc+0x90/0xe0 [ 278.446011] inode_init_always+0x56e/0xb50 [ 278.450261] alloc_inode+0x83/0x190 [ 278.453904] new_inode_pseudo+0x19/0xf0 [ 278.457889] new_inode+0x1f/0x40 [ 278.461264] shmem_get_inode+0x84/0x780 [ 278.465239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.470783] __shmem_file_setup.part.0+0x7e/0x2b0 [ 278.475643] shmem_file_setup+0x66/0x90 [ 278.479644] drm_gem_object_init+0x3b/0xb0 [ 278.483934] vkms_gem_create.part.0+0x8d/0x170 [ 278.488549] vkms_dumb_create+0x11e/0x240 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x1f000000]}) 13:26:29 executing program 5: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x1f00000000000000]}) [ 278.492727] drm_mode_create_dumb+0x288/0x310 [ 278.497252] drm_mode_create_dumb_ioctl+0x26/0x30 [ 278.502104] drm_ioctl_kernel+0x23b/0x2e0 [ 278.506264] ? drm_mode_create_dumb+0x310/0x310 [ 278.510952] ? drm_setversion+0x8c0/0x8c0 [ 278.515119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.520672] ? _copy_from_user+0xdd/0x150 [ 278.524838] drm_ioctl+0x545/0xa50 [ 278.528380] ? drm_mode_create_dumb+0x310/0x310 [ 278.528402] ? drm_version+0x3d0/0x3d0 [ 278.528416] ? smack_log+0x415/0x540 [ 278.528435] ? smk_access_entry+0x1c0/0x1c0 [ 278.528449] ? __fget+0x340/0x540 [ 278.528466] ? smk_access+0x40d/0x570 [ 278.545030] ? find_held_lock+0x35/0x130 [ 278.545050] ? smk_tskacc+0x2ba/0x390 [ 278.545064] ? drm_version+0x3d0/0x3d0 [ 278.545081] do_vfs_ioctl+0xd6e/0x1390 [ 278.545098] ? smk_curacc+0x7f/0xa0 [ 278.556401] ? ioctl_preallocate+0x210/0x210 [ 278.556415] ? smack_file_ioctl+0x196/0x300 [ 278.556429] ? smack_file_lock+0x240/0x240 [ 278.556441] ? __fget+0x367/0x540 [ 278.556464] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 278.564137] ? fput+0x128/0x1a0 [ 278.564160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.564178] ? security_file_ioctl+0x93/0xc0 [ 278.564196] ksys_ioctl+0xab/0xd0 [ 278.564228] __x64_sys_ioctl+0x73/0xb0 [ 278.571741] do_syscall_64+0x103/0x610 [ 278.571772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.571785] RIP: 0033:0x457f29 [ 278.571800] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:26:29 executing program 4 (fault-call:2 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x1f00]}) 13:26:29 executing program 0: getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x248003, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000200)={0x6, 0x9, @value=0x2}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x5, 0x800, [], &(0x7f0000000100)=0x6}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0x5, [0x325d5a41, 0x0, 0x3, 0x200, 0x7fff, 0xd46, 0x9, 0x0, 0x344, 0x1, 0x6, 0xffffffff80000001, 0x8, 0x3, 0xfffffffffffffc63, 0x973, 0x4, 0x3, 0x8, 0x9, 0x8000, 0x401, 0x100, 0x4c81, 0x1, 0x4, 0x20, 0x1000, 0x7, 0x4, 0xa625, 0x3f, 0x6bcecfd5, 0x5, 0x2, 0x1, 0x7, 0x10000, 0x7fff, 0x1, 0x8001, 0x200, 0x0, 0x7fff, 0x1, 0xe7f, 0x7618, 0x5be80a1c], 0x3}) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000240), 0x0) socket$key(0xf, 0x3, 0x2) 13:26:29 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x24, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 278.571809] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.571823] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 278.571836] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 278.580569] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.580579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 278.580600] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 13:26:29 executing program 0: getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 278.732669] FAULT_INJECTION: forcing a failure. [ 278.732669] name failslab, interval 1, probability 0, space 0, times 0 [ 278.778665] CPU: 0 PID: 9626 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 278.785528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.794887] Call Trace: [ 278.797510] dump_stack+0x172/0x1f0 [ 278.801161] should_fail.cold+0xa/0x15 [ 278.805079] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 278.810212] ? ___might_sleep+0x163/0x280 [ 278.814389] __should_failslab+0x121/0x190 [ 278.818640] should_failslab+0x9/0x14 [ 278.818658] kmem_cache_alloc+0x2b2/0x6f0 [ 278.818673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.818690] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 278.832162] ? map_id_range_down+0x1ee/0x370 [ 278.832188] new_inode_smack+0x20/0xb0 [ 278.832207] smack_inode_alloc_security+0x97/0x100 [ 278.832225] security_inode_alloc+0x90/0xe0 [ 278.832242] inode_init_always+0x56e/0xb50 [ 278.832258] alloc_inode+0x83/0x190 [ 278.832273] new_inode_pseudo+0x19/0xf0 [ 278.832288] new_inode+0x1f/0x40 [ 278.832305] shmem_get_inode+0x84/0x780 [ 278.850509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.850542] __shmem_file_setup.part.0+0x7e/0x2b0 [ 278.850577] shmem_file_setup+0x66/0x90 [ 278.850595] drm_gem_object_init+0x3b/0xb0 [ 278.850633] vkms_gem_create.part.0+0x8d/0x170 [ 278.850650] vkms_dumb_create+0x11e/0x240 [ 278.859253] drm_mode_create_dumb+0x288/0x310 [ 278.859274] drm_mode_create_dumb_ioctl+0x26/0x30 [ 278.859290] drm_ioctl_kernel+0x23b/0x2e0 [ 278.870222] ? drm_mode_create_dumb+0x310/0x310 [ 278.870237] ? drm_setversion+0x8c0/0x8c0 [ 278.870254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.870270] ? _copy_from_user+0xdd/0x150 [ 278.870285] drm_ioctl+0x545/0xa50 [ 278.870298] ? drm_mode_create_dumb+0x310/0x310 [ 278.870317] ? drm_version+0x3d0/0x3d0 [ 278.870332] ? smack_log+0x415/0x540 [ 278.879859] ? smk_access_entry+0x1c0/0x1c0 [ 278.879875] ? __fget+0x340/0x540 [ 278.879888] ? smk_access+0x40d/0x570 [ 278.879904] ? find_held_lock+0x35/0x130 [ 278.898010] ? smk_tskacc+0x2ba/0x390 [ 278.898027] ? drm_version+0x3d0/0x3d0 [ 278.898046] do_vfs_ioctl+0xd6e/0x1390 [ 278.898061] ? smk_curacc+0x7f/0xa0 [ 278.898078] ? ioctl_preallocate+0x210/0x210 [ 278.906699] ? smack_file_ioctl+0x196/0x300 [ 278.906715] ? smack_file_lock+0x240/0x240 [ 278.906742] ? __fget+0x367/0x540 [ 278.906778] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 278.906796] ? fput+0x128/0x1a0 [ 278.920446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.920465] ? security_file_ioctl+0x93/0xc0 [ 278.920483] ksys_ioctl+0xab/0xd0 [ 278.920502] __x64_sys_ioctl+0x73/0xb0 [ 278.920520] do_syscall_64+0x103/0x610 13:26:29 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x66, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x1f000000]}) 13:26:29 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x1f00000000000000]}) [ 278.920542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.920554] RIP: 0033:0x457f29 [ 278.920569] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.920580] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.930243] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 278.930254] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 13:26:29 executing program 4 (fault-call:2 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x0, 0x1f00]}) 13:26:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 278.930263] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.930273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 278.930281] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 13:26:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 279.210115] FAULT_INJECTION: forcing a failure. [ 279.210115] name failslab, interval 1, probability 0, space 0, times 0 [ 279.250382] CPU: 1 PID: 9667 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 279.257232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.266595] Call Trace: [ 279.269205] dump_stack+0x172/0x1f0 [ 279.272876] should_fail.cold+0xa/0x15 [ 279.276785] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 279.281910] ? ___might_sleep+0x163/0x280 [ 279.286072] __should_failslab+0x121/0x190 [ 279.286123] should_failslab+0x9/0x14 [ 279.286139] kmem_cache_alloc+0x2b2/0x6f0 [ 279.286163] __alloc_file+0x27/0x300 [ 279.294206] alloc_empty_file+0x72/0x170 [ 279.294226] alloc_file+0x5e/0x4d0 [ 279.294246] alloc_file_pseudo+0x189/0x280 [ 279.294264] ? alloc_file+0x4d0/0x4d0 [ 279.317711] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 279.323272] __shmem_file_setup.part.0+0x108/0x2b0 [ 279.328224] shmem_file_setup+0x66/0x90 [ 279.332213] drm_gem_object_init+0x3b/0xb0 [ 279.336461] vkms_gem_create.part.0+0x8d/0x170 [ 279.341067] vkms_dumb_create+0x11e/0x240 [ 279.345233] drm_mode_create_dumb+0x288/0x310 [ 279.349753] drm_mode_create_dumb_ioctl+0x26/0x30 [ 279.354608] drm_ioctl_kernel+0x23b/0x2e0 [ 279.358770] ? drm_mode_create_dumb+0x310/0x310 [ 279.363471] ? drm_setversion+0x8c0/0x8c0 [ 279.367667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.373228] ? _copy_from_user+0xdd/0x150 [ 279.377391] drm_ioctl+0x545/0xa50 [ 279.380953] ? drm_mode_create_dumb+0x310/0x310 [ 279.385641] ? drm_version+0x3d0/0x3d0 [ 279.389542] ? smack_log+0x415/0x540 [ 279.393268] ? smk_access_entry+0x1c0/0x1c0 [ 279.397594] ? __fget+0x340/0x540 [ 279.401057] ? smk_access+0x40d/0x570 [ 279.404869] ? find_held_lock+0x35/0x130 [ 279.408966] ? smk_tskacc+0x2ba/0x390 [ 279.412781] ? drm_version+0x3d0/0x3d0 [ 279.416690] do_vfs_ioctl+0xd6e/0x1390 [ 279.420588] ? smk_curacc+0x7f/0xa0 [ 279.424227] ? ioctl_preallocate+0x210/0x210 [ 279.428644] ? smack_file_ioctl+0x196/0x300 [ 279.432992] ? smack_file_lock+0x240/0x240 [ 279.437256] ? __fget+0x367/0x540 [ 279.440726] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 279.446269] ? fput+0x128/0x1a0 [ 279.449576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.455143] ? security_file_ioctl+0x93/0xc0 [ 279.459581] ksys_ioctl+0xab/0xd0 [ 279.463064] __x64_sys_ioctl+0x73/0xb0 [ 279.466968] do_syscall_64+0x103/0x610 [ 279.470876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.476064] RIP: 0033:0x457f29 [ 279.479241] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.498133] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.505865] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 279.513124] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 279.520377] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.527635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 279.534925] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 13:26:30 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r2) r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="94115d230a136bfd2d99cc08171d93576141d17e242c3677f2c6e4d87b32cc7e149f659310c1a1eaedd14c8b75bd33c7b608382d288860ccdbc3052e6030d8a7579caa24a4c28cd510c2ac4fa9e9ca7d86e3286f1779365009981e3958c3e96e5642", 0x62, 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r3, r4, r5}, &(0x7f0000000380)=""/173, 0xad, &(0x7f0000000500)={&(0x7f0000000440)={'sha3-384-ce\x00'}, &(0x7f0000000480)="ab4564dca5ffa93cf26f58e2095acea8ee1336646b96512c65770cfd57823d4eb0d7c659cb998d23af7998df899bb15e0da2536a6ce5f5e934514a4f699c4f1373c37f60942963f86d74f3b38e20c89d5488864e1df732edf968dd7c7b83e48c63e319d8", 0x64}) 13:26:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x0, 0x1f00000000000000]}) 13:26:30 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6c, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:30 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:30 executing program 4 (fault-call:2 fault-nth:6): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 13:26:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 279.746409] FAULT_INJECTION: forcing a failure. [ 279.746409] name failslab, interval 1, probability 0, space 0, times 0 [ 279.758371] CPU: 1 PID: 9692 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 279.758395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.758401] Call Trace: [ 279.758423] dump_stack+0x172/0x1f0 [ 279.758446] should_fail.cold+0xa/0x15 [ 279.758465] ? do_syscall_64+0x103/0x610 [ 279.758485] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 279.758504] ? percpu_ref_put_many+0x94/0x190 [ 279.758526] __should_failslab+0x121/0x190 [ 279.758545] should_failslab+0x9/0x14 [ 279.758561] kmem_cache_alloc+0x47/0x6f0 [ 279.758578] ? lock_downgrade+0x880/0x880 [ 279.758596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.758621] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 279.758645] idr_get_free+0x425/0x8d0 [ 279.758674] idr_alloc_u32+0x19e/0x330 [ 279.758696] ? __fprop_inc_percpu_max+0x230/0x230 [ 279.758714] ? drm_gem_handle_create+0x47/0x70 13:26:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 279.758733] ? alloc_file_pseudo+0x1a9/0x280 [ 279.758752] idr_alloc+0xe5/0x150 [ 279.758772] ? idr_alloc_u32+0x330/0x330 [ 279.758804] drm_gem_handle_create_tail+0x12a/0x3b0 [ 279.758827] drm_gem_handle_create+0x55/0x70 [ 279.794232] vkms_gem_create.part.0+0xf4/0x170 [ 279.794252] vkms_dumb_create+0x11e/0x240 [ 279.794271] drm_mode_create_dumb+0x288/0x310 [ 279.794290] drm_mode_create_dumb_ioctl+0x26/0x30 [ 279.794305] drm_ioctl_kernel+0x23b/0x2e0 [ 279.803019] ? drm_mode_create_dumb+0x310/0x310 [ 279.803034] ? drm_setversion+0x8c0/0x8c0 [ 279.803050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.803068] ? _copy_from_user+0xdd/0x150 [ 279.873258] drm_ioctl+0x545/0xa50 [ 279.882566] ? drm_mode_create_dumb+0x310/0x310 [ 279.882587] ? drm_version+0x3d0/0x3d0 [ 279.882603] ? smack_log+0x415/0x540 [ 279.921266] ? smk_access_entry+0x1c0/0x1c0 [ 279.921283] ? __fget+0x340/0x540 [ 279.929063] ? smk_access+0x40d/0x570 [ 279.932884] ? find_held_lock+0x35/0x130 [ 279.936961] ? smk_tskacc+0x2ba/0x390 [ 279.940768] ? drm_version+0x3d0/0x3d0 13:26:30 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 279.944687] do_vfs_ioctl+0xd6e/0x1390 [ 279.948576] ? smk_curacc+0x7f/0xa0 [ 279.952222] ? ioctl_preallocate+0x210/0x210 [ 279.956636] ? smack_file_ioctl+0x196/0x300 [ 279.961014] ? smack_file_lock+0x240/0x240 [ 279.965254] ? __fget+0x367/0x540 [ 279.965280] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 279.965296] ? fput+0x128/0x1a0 [ 279.965316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.965345] ? security_file_ioctl+0x93/0xc0 [ 279.974326] ksys_ioctl+0xab/0xd0 [ 279.974356] __x64_sys_ioctl+0x73/0xb0 [ 279.974377] do_syscall_64+0x103/0x610 [ 279.974400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.974418] RIP: 0033:0x457f29 [ 280.007204] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.026122] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.033838] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 13:26:30 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6f, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) [ 280.041120] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 280.048437] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.055714] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 280.062989] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 13:26:31 executing program 2: time(&(0x7f0000000140)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 13:26:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x1f00, {0x0, 0x1c9c380}}) 13:26:31 executing program 4 (fault-call:2 fault-nth:7): r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 280.150868] net_ratelimit: 16 callbacks suppressed [ 280.150876] protocol 88fb is buggy, dev hsr_slave_0 [ 280.155879] protocol 88fb is buggy, dev hsr_slave_1 13:26:31 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1a, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 13:26:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00]}) [ 280.227660] FAULT_INJECTION: forcing a failure. [ 280.227660] name failslab, interval 1, probability 0, space 0, times 0 [ 280.270540] CPU: 0 PID: 9728 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 280.277502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.286850] Call Trace: [ 280.289445] dump_stack+0x172/0x1f0 [ 280.293087] should_fail.cold+0xa/0x15 [ 280.296988] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 280.300299] protocol 88fb is buggy, dev hsr_slave_0 [ 280.302104] ? ___might_sleep+0x163/0x280 [ 280.302124] __should_failslab+0x121/0x190 [ 280.302144] should_failslab+0x9/0x14 13:26:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f000000]}) 13:26:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) [ 280.302160] kmem_cache_alloc_trace+0x2d1/0x760 [ 280.302178] ? wait_for_completion+0x440/0x440 [ 280.307226] protocol 88fb is buggy, dev hsr_slave_1 [ 280.311397] drm_vma_node_allow+0x52/0x2f0 [ 280.311424] drm_gem_handle_create_tail+0x194/0x3b0 [ 280.328668] drm_gem_handle_create+0x55/0x70 [ 280.347297] vkms_gem_create.part.0+0xf4/0x170 [ 280.351919] vkms_dumb_create+0x11e/0x240 [ 280.351939] drm_mode_create_dumb+0x288/0x310 [ 280.351958] drm_mode_create_dumb_ioctl+0x26/0x30 [ 280.351973] drm_ioctl_kernel+0x23b/0x2e0 [ 280.351987] ? drm_mode_create_dumb+0x310/0x310 [ 280.352001] ? drm_setversion+0x8c0/0x8c0 [ 280.352020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 280.352037] ? _copy_from_user+0xdd/0x150 [ 280.383958] drm_ioctl+0x545/0xa50 [ 280.383986] ? drm_mode_create_dumb+0x310/0x310 [ 280.384006] ? drm_version+0x3d0/0x3d0 [ 280.384024] ? smack_log+0x415/0x540 [ 280.400233] ? smk_access_entry+0x1c0/0x1c0 [ 280.400250] ? __fget+0x340/0x540 [ 280.400263] ? smk_access+0x40d/0x570 [ 280.400279] ? find_held_lock+0x35/0x130 [ 280.400298] ? smk_tskacc+0x2ba/0x390 [ 280.400313] ? drm_version+0x3d0/0x3d0 [ 280.427334] do_vfs_ioctl+0xd6e/0x1390 [ 280.431259] ? smk_curacc+0x7f/0xa0 [ 280.434893] ? ioctl_preallocate+0x210/0x210 [ 280.439304] ? smack_file_ioctl+0x196/0x300 [ 280.443648] ? smack_file_lock+0x240/0x240 [ 280.447896] ? __fget+0x367/0x540 [ 280.451383] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.456935] ? fput+0x128/0x1a0 [ 280.460228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 280.465790] ? security_file_ioctl+0x93/0xc0 13:26:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) 13:26:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x4, 0x0, {0x0, 0x1c9c380}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 280.470206] ksys_ioctl+0xab/0xd0 [ 280.473677] __x64_sys_ioctl+0x73/0xb0 [ 280.477581] do_syscall_64+0x103/0x610 [ 280.481488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.486706] RIP: 0033:0x457f29 [ 280.489914] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.508815] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:26:31 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x70, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 280.516527] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 280.523801] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 280.523810] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.523819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 280.523828] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 280.539205] ================================================================== [ 280.560694] BUG: KASAN: use-after-free in drm_gem_object_release+0xf1/0x110 [ 280.567806] Read of size 8 at addr ffff8880a5cd3110 by task syz-executor.4/9728 [ 280.575253] [ 280.576897] CPU: 0 PID: 9728 Comm: syz-executor.4 Not tainted 5.0.0+ #10 [ 280.583792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.593167] Call Trace: [ 280.595783] dump_stack+0x172/0x1f0 [ 280.599420] ? drm_gem_object_release+0xf1/0x110 [ 280.604185] print_address_description.cold+0x7c/0x20d [ 280.604199] ? drm_gem_object_release+0xf1/0x110 [ 280.604212] ? drm_gem_object_release+0xf1/0x110 [ 280.604228] kasan_report.cold+0x1b/0x40 [ 280.604245] ? vkms_gem_create.part.0+0x170/0x170 [ 280.620304] protocol 88fb is buggy, dev hsr_slave_0 [ 280.623067] ? drm_gem_object_release+0xf1/0x110 [ 280.627926] protocol 88fb is buggy, dev hsr_slave_1 [ 280.632933] __asan_report_load8_noabort+0x14/0x20 [ 280.632960] drm_gem_object_release+0xf1/0x110 [ 280.632977] vkms_gem_create.part.0+0x147/0x170 [ 280.632995] vkms_dumb_create+0x11e/0x240 [ 280.633014] drm_mode_create_dumb+0x288/0x310 [ 280.647678] drm_mode_create_dumb_ioctl+0x26/0x30 [ 280.647695] drm_ioctl_kernel+0x23b/0x2e0 [ 280.647708] ? drm_mode_create_dumb+0x310/0x310 [ 280.647728] ? drm_setversion+0x8c0/0x8c0 [ 280.670409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 280.670428] ? _copy_from_user+0xdd/0x150 [ 280.670447] drm_ioctl+0x545/0xa50 [ 280.670461] ? drm_mode_create_dumb+0x310/0x310 [ 280.670483] ? drm_version+0x3d0/0x3d0 [ 280.670498] ? smack_log+0x415/0x540 [ 280.670516] ? smk_access_entry+0x1c0/0x1c0 [ 280.670532] ? __fget+0x340/0x540 [ 280.670545] ? smk_access+0x40d/0x570 [ 280.670560] ? find_held_lock+0x35/0x130 [ 280.670577] ? smk_tskacc+0x2ba/0x390 [ 280.670593] ? drm_version+0x3d0/0x3d0 [ 280.732257] do_vfs_ioctl+0xd6e/0x1390 [ 280.736161] ? smk_curacc+0x7f/0xa0 [ 280.739804] ? ioctl_preallocate+0x210/0x210 [ 280.744220] ? smack_file_ioctl+0x196/0x300 [ 280.748548] ? smack_file_lock+0x240/0x240 [ 280.752794] ? __fget+0x367/0x540 [ 280.756263] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.761821] ? fput+0x128/0x1a0 [ 280.765124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 13:26:31 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x71, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 280.770674] ? security_file_ioctl+0x93/0xc0 [ 280.775091] ksys_ioctl+0xab/0xd0 [ 280.778561] __x64_sys_ioctl+0x73/0xb0 [ 280.782462] do_syscall_64+0x103/0x610 [ 280.786379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.786392] RIP: 0033:0x457f29 [ 280.786407] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.786416] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.786429] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 280.786442] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 280.813706] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.813716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 280.813726] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 280.813748] [ 280.813811] Allocated by task 9728: [ 280.813830] save_stack+0x45/0xd0 [ 280.813847] __kasan_kmalloc.constprop.0+0xcf/0xe0 13:26:31 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x72, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 280.813865] kasan_kmalloc+0x9/0x10 [ 280.813879] kmem_cache_alloc_trace+0x151/0x760 [ 280.813894] vkms_gem_create.part.0+0x5f/0x170 [ 280.813906] vkms_dumb_create+0x11e/0x240 [ 280.813936] drm_mode_create_dumb+0x288/0x310 [ 280.893296] drm_mode_create_dumb_ioctl+0x26/0x30 [ 280.898146] drm_ioctl_kernel+0x23b/0x2e0 [ 280.902298] drm_ioctl+0x545/0xa50 [ 280.905859] do_vfs_ioctl+0xd6e/0x1390 [ 280.909767] ksys_ioctl+0xab/0xd0 [ 280.913225] __x64_sys_ioctl+0x73/0xb0 [ 280.917120] do_syscall_64+0x103/0x610 [ 280.921034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.926231] [ 280.927855] Freed by task 9728: [ 280.931136] save_stack+0x45/0xd0 [ 280.934594] __kasan_slab_free+0x102/0x150 [ 280.938836] kasan_slab_free+0xe/0x10 [ 280.942654] kfree+0xcf/0x230 [ 280.945787] vkms_gem_free_object+0x89/0xb0 [ 280.950136] drm_gem_object_free+0x108/0x260 [ 280.954548] drm_gem_object_put_unlocked+0x129/0x170 [ 280.959670] vkms_gem_create.part.0+0x101/0x170 [ 280.964376] vkms_dumb_create+0x11e/0x240 [ 280.968527] drm_mode_create_dumb+0x288/0x310 [ 280.973023] drm_mode_create_dumb_ioctl+0x26/0x30 [ 280.977863] drm_ioctl_kernel+0x23b/0x2e0 [ 280.982036] drm_ioctl+0x545/0xa50 [ 280.985580] do_vfs_ioctl+0xd6e/0x1390 [ 280.989470] ksys_ioctl+0xab/0xd0 [ 280.992931] __x64_sys_ioctl+0x73/0xb0 [ 280.996992] do_syscall_64+0x103/0x610 [ 281.000887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.006065] [ 281.007695] The buggy address belongs to the object at ffff8880a5cd3000 [ 281.007695] which belongs to the cache kmalloc-512 of size 512 [ 281.020358] The buggy address is located 272 bytes inside of [ 281.020358] 512-byte region [ffff8880a5cd3000, ffff8880a5cd3200) [ 281.020363] The buggy address belongs to the page: [ 281.020376] page:ffffea00029734c0 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 281.020388] flags: 0x1fffc0000000200(slab) [ 281.020406] raw: 01fffc0000000200 ffffea0002839048 ffffea0002a1d488 ffff88812c3f0940 [ 281.020421] raw: 0000000000000000 ffff8880a5cd3000 0000000100000006 0000000000000000 [ 281.020427] page dumped because: kasan: bad access detected [ 281.020430] [ 281.020435] Memory state around the buggy address: [ 281.020446] ffff8880a5cd3000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.020457] ffff8880a5cd3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.020472] >ffff8880a5cd3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.043653] kobject: 'loop5' (00000000a81813c0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 281.045402] ^ [ 281.045414] ffff8880a5cd3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.045423] ffff8880a5cd3200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.045428] ================================================================== [ 281.045435] Disabling lock debugging due to kernel taint [ 281.054894] kobject: 'loop3' (0000000024b20ddb): kobject_uevent_env [ 281.060128] Kernel panic - not syncing: panic_on_warn set ... [ 281.089472] kobject: 'loop3' (0000000024b20ddb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 281.092431] CPU: 0 PID: 9728 Comm: syz-executor.4 Tainted: G B 5.0.0+ #10 [ 281.092439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.092454] Call Trace: [ 281.092471] dump_stack+0x172/0x1f0 [ 281.092589] panic+0x2cb/0x65c [ 281.092626] ? __warn_printk+0xf3/0xf3 [ 281.193251] ? drm_gem_object_release+0xf1/0x110 [ 281.197999] ? preempt_schedule+0x4b/0x60 [ 281.202199] ? ___preempt_schedule+0x16/0x18 [ 281.206638] ? trace_hardirqs_on+0x5e/0x230 [ 281.210956] ? drm_gem_object_release+0xf1/0x110 [ 281.215704] end_report+0x47/0x4f [ 281.219150] ? drm_gem_object_release+0xf1/0x110 [ 281.223901] kasan_report.cold+0xe/0x40 [ 281.227875] ? vkms_gem_create.part.0+0x170/0x170 [ 281.232698] ? drm_gem_object_release+0xf1/0x110 [ 281.237437] __asan_report_load8_noabort+0x14/0x20 [ 281.242364] drm_gem_object_release+0xf1/0x110 [ 281.246939] vkms_gem_create.part.0+0x147/0x170 [ 281.251592] vkms_dumb_create+0x11e/0x240 [ 281.255725] drm_mode_create_dumb+0x288/0x310 [ 281.260206] drm_mode_create_dumb_ioctl+0x26/0x30 [ 281.265059] drm_ioctl_kernel+0x23b/0x2e0 [ 281.269188] ? drm_mode_create_dumb+0x310/0x310 [ 281.273837] ? drm_setversion+0x8c0/0x8c0 [ 281.277979] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.283497] ? _copy_from_user+0xdd/0x150 [ 281.287630] drm_ioctl+0x545/0xa50 [ 281.291148] ? drm_mode_create_dumb+0x310/0x310 [ 281.295824] ? drm_version+0x3d0/0x3d0 [ 281.299722] ? smack_log+0x415/0x540 [ 281.303419] ? smk_access_entry+0x1c0/0x1c0 [ 281.307757] ? __fget+0x340/0x540 [ 281.311200] ? smk_access+0x40d/0x570 [ 281.314982] ? find_held_lock+0x35/0x130 [ 281.319026] ? smk_tskacc+0x2ba/0x390 [ 281.322822] ? drm_version+0x3d0/0x3d0 [ 281.326695] do_vfs_ioctl+0xd6e/0x1390 [ 281.330568] ? smk_curacc+0x7f/0xa0 [ 281.334188] ? ioctl_preallocate+0x210/0x210 [ 281.338579] ? smack_file_ioctl+0x196/0x300 [ 281.342914] ? smack_file_lock+0x240/0x240 [ 281.347156] ? __fget+0x367/0x540 [ 281.350597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.356124] ? fput+0x128/0x1a0 [ 281.359387] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.364911] ? security_file_ioctl+0x93/0xc0 [ 281.369304] ksys_ioctl+0xab/0xd0 [ 281.372742] __x64_sys_ioctl+0x73/0xb0 [ 281.376619] do_syscall_64+0x103/0x610 [ 281.380520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.385711] RIP: 0033:0x457f29 [ 281.388886] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.407779] RSP: 002b:00007f77af21ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.415467] RAX: ffffffffffffffda RBX: 00007f77af21ec90 RCX: 0000000000457f29 [ 281.422726] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 281.429996] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.437247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77af21f6d4 [ 281.444500] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 281.452485] Kernel Offset: disabled [ 281.456104] Rebooting in 86400 seconds..