000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000580)=""/197) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:04:09 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:09 executing program 2 (fault-call:0 fault-nth:2): socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 01:04:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x3, 0x7}, 0x0) getdents(r2, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_open_dev$amidi(&(0x7f0000001780)='/dev/amidi#\x00', 0x3, 0x193102) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001800)="c815890fd072613fd8104fabb7ce8c4701e04133eb040000009c36d5c3fd938a4d244e7aa2b969aa9631a47bd9d6f2168a32d393") openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000015c0)=[&(0x7f0000001400)='/dev/nullb0\x00', &(0x7f0000001440)='@wlan1trusted-cgroup\x00', &(0x7f0000001500)='vmnet0\x00', &(0x7f0000001540)='lovmnet1---bdevmime_typebdev:wlan0}}\x00', &(0x7f0000001580)='md5sum{\'usercgroupself-{wlan0\x00'], &(0x7f0000001740)=[&(0x7f0000001600)='!em0\x00', &(0x7f0000001640)='self\x00', &(0x7f0000001680)='bdev@trustedself]-]#\xdd*losystem&,vboxnet0-\x00', &(0x7f00000016c0)='\'cpusetppp1}.*\x00', &(0x7f0000001700)='/dev/nullb0\x00'], 0x100) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_open_procfs(0x0, &(0x7f0000001b00)='ns\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') [ 246.759387][T10219] FAULT_INJECTION: forcing a failure. [ 246.759387][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 246.786022][T10223] FAULT_INJECTION: forcing a failure. [ 246.786022][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 246.789147][T10219] CPU: 1 PID: 10219 Comm: syz-executor.2 Not tainted 5.5.0-rc2-syzkaller #0 [ 246.807578][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.817641][T10219] Call Trace: [ 246.820942][T10219] dump_stack+0x197/0x210 [ 246.825282][T10219] should_fail.cold+0xa/0x15 [ 246.829896][T10219] ? fault_create_debugfs_attr+0x180/0x180 [ 246.835719][T10219] ? ___might_sleep+0x163/0x2c0 [ 246.840582][T10219] __should_failslab+0x121/0x190 [ 246.845526][T10219] should_failslab+0x9/0x14 [ 246.850037][T10219] kmem_cache_alloc+0x2aa/0x710 [ 246.854897][T10219] ? __kasan_check_write+0x14/0x20 [ 246.860087][T10219] ? up_write+0x150/0x490 [ 246.864430][T10219] ? do_raw_spin_unlock+0x181/0x270 [ 246.869635][T10219] __khugepaged_enter+0x3b/0x3a0 [ 246.874577][T10219] do_huge_pmd_anonymous_page+0x129f/0x1a50 [ 246.880473][T10219] ? mark_lock+0xc2/0x1220 [ 246.884900][T10219] ? __kasan_check_read+0x11/0x20 [ 246.889962][T10219] ? prep_transhuge_page+0xa0/0xa0 [ 246.895075][T10219] ? pmd_val+0x100/0x100 [ 246.899332][T10219] __handle_mm_fault+0x3073/0x3da0 [ 246.904447][T10219] ? vm_iomap_memory+0x1a0/0x1a0 [ 246.909389][T10219] ? handle_mm_fault+0x292/0xa50 [ 246.914389][T10219] ? handle_mm_fault+0x7a0/0xa50 [ 246.919340][T10219] ? __kasan_check_read+0x11/0x20 [ 246.924375][T10219] handle_mm_fault+0x3b2/0xa50 [ 246.929158][T10219] __do_page_fault+0x536/0xd80 [ 246.933941][T10219] do_page_fault+0x38/0x590 [ 246.938463][T10219] page_fault+0x39/0x40 [ 246.942631][T10219] RIP: 0010:__put_user_4+0x1c/0x30 [ 246.947742][T10219] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1e 02 00 48 8b 9b d0 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 246.967350][T10219] RSP: 0018:ffffc90007eafe18 EFLAGS: 00010293 [ 246.973406][T10219] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000140 [ 246.981370][T10219] RDX: 0000000000000059 RSI: ffffffff81a1da81 RDI: 0000000000000282 [ 246.989341][T10219] RBP: ffffc90007eafee0 R08: 0000000000000001 R09: ffff8880890a6ad0 [ 246.997323][T10219] R10: fffffbfff14f33c0 R11: ffffffff8a799e07 R12: 0000000000000000 [ 247.005280][T10219] R13: 0000000000000004 R14: 0000000000000005 R15: 0000000000000000 [ 247.013272][T10219] ? __might_fault+0x1a1/0x1e0 [ 247.018037][T10219] ? __sys_socketpair+0x11f/0x5d0 [ 247.023062][T10219] ? __ia32_sys_socket+0xb0/0xb0 [ 247.028013][T10219] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.033469][T10219] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.038937][T10219] ? do_syscall_64+0x26/0x790 [ 247.043608][T10219] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.049666][T10219] ? do_syscall_64+0x26/0x790 [ 247.054351][T10219] __x64_sys_socketpair+0x97/0xf0 [ 247.059371][T10219] do_syscall_64+0xfa/0x790 [ 247.063864][T10219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.069744][T10219] RIP: 0033:0x45a919 [ 247.073626][T10219] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.093212][T10219] RSP: 002b:00007fdc13830c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 247.101610][T10219] RAX: ffffffffffffffda RBX: 00007fdc13830c90 RCX: 000000000045a919 01:04:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 247.109569][T10219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 247.117527][T10219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.125483][T10219] R10: 0000000020000140 R11: 0000000000000246 R12: 00007fdc138316d4 [ 247.133439][T10219] R13: 00000000004caab3 R14: 00000000004e3d90 R15: 0000000000000003 [ 247.141416][T10223] CPU: 0 PID: 10223 Comm: syz-executor.1 Not tainted 5.5.0-rc2-syzkaller #0 [ 247.150107][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.160168][T10223] Call Trace: [ 247.163488][T10223] dump_stack+0x197/0x210 [ 247.167841][T10223] should_fail.cold+0xa/0x15 [ 247.172461][T10223] ? fault_create_debugfs_attr+0x180/0x180 [ 247.178308][T10223] __should_failslab+0x121/0x190 [ 247.183256][T10223] should_failslab+0x9/0x14 [ 247.187885][T10223] kmem_cache_alloc+0x47/0x710 [ 247.192671][T10223] ? lock_acquire+0x190/0x410 [ 247.197357][T10223] ? netlink_deliver_tap+0x146/0xbe0 [ 247.202644][T10223] skb_clone+0x154/0x3d0 [ 247.206874][T10223] netlink_deliver_tap+0x943/0xbe0 [ 247.211993][T10223] netlink_unicast+0x643/0x7d0 [ 247.216911][T10223] ? netlink_attachskb+0x870/0x870 [ 247.222034][T10223] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 247.227828][T10223] ? __check_object_size+0x3d/0x437 [ 247.233048][T10223] netlink_sendmsg+0x91c/0xea0 [ 247.237823][T10223] ? netlink_unicast+0x7d0/0x7d0 [ 247.242748][T10223] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 247.248309][T10223] ? apparmor_socket_sendmsg+0x2a/0x30 [ 247.253773][T10223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.260003][T10223] ? security_socket_sendmsg+0x8d/0xc0 [ 247.265460][T10223] ? netlink_unicast+0x7d0/0x7d0 [ 247.270395][T10223] sock_sendmsg+0xd7/0x130 [ 247.274812][T10223] ____sys_sendmsg+0x753/0x880 [ 247.279562][T10223] ? kernel_sendmsg+0x50/0x50 [ 247.284226][T10223] ? __fget+0x35d/0x550 [ 247.288379][T10223] ? find_held_lock+0x35/0x130 [ 247.293173][T10223] ___sys_sendmsg+0x100/0x170 [ 247.297873][T10223] ? sendmsg_copy_msghdr+0x70/0x70 [ 247.302976][T10223] ? __kasan_check_read+0x11/0x20 [ 247.308005][T10223] ? __fget+0x37f/0x550 [ 247.312172][T10223] ? ksys_dup3+0x3e0/0x3e0 [ 247.316714][T10223] ? __fget_light+0x1a9/0x230 [ 247.321414][T10223] ? __fdget+0x1b/0x20 [ 247.325468][T10223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.331720][T10223] __sys_sendmsg+0x105/0x1d0 [ 247.336405][T10223] ? __sys_sendmsg_sock+0xc0/0xc0 [ 247.341547][T10223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.347010][T10223] ? do_syscall_64+0x26/0x790 [ 247.351697][T10223] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.357770][T10223] ? do_syscall_64+0x26/0x790 [ 247.362462][T10223] __x64_sys_sendmsg+0x78/0xb0 [ 247.367234][T10223] do_syscall_64+0xfa/0x790 [ 247.371756][T10223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.377657][T10223] RIP: 0033:0x45a919 [ 247.381633][T10223] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.401225][T10223] RSP: 002b:00007fd044d07c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.409633][T10223] RAX: ffffffffffffffda RBX: 00007fd044d07c90 RCX: 000000000045a919 [ 247.417610][T10223] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 247.425580][T10223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.433538][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd044d086d4 [ 247.441496][T10223] R13: 00000000004c9a63 R14: 00000000004e1828 R15: 0000000000000004 01:04:10 executing program 2 (fault-call:0 fault-nth:3): socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 01:04:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:10 executing program 1 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 247.636441][T10225] pit: kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 247.670643][T10240] FAULT_INJECTION: forcing a failure. [ 247.670643][T10240] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 247.688158][T10225] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns 01:04:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 247.729102][T10240] CPU: 0 PID: 10240 Comm: syz-executor.2 Not tainted 5.5.0-rc2-syzkaller #0 [ 247.737986][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.748052][T10240] Call Trace: [ 247.751365][T10240] dump_stack+0x197/0x210 [ 247.755717][T10240] should_fail.cold+0xa/0x15 [ 247.760332][T10240] ? fault_create_debugfs_attr+0x180/0x180 [ 247.766167][T10240] ? __kasan_check_read+0x11/0x20 [ 247.771224][T10240] should_fail_alloc_page+0x50/0x60 [ 247.776443][T10240] __alloc_pages_nodemask+0x1a1/0x910 [ 247.781847][T10240] ? __alloc_pages_slowpath+0x2920/0x2920 [ 247.787586][T10240] ? lock_downgrade+0x920/0x920 [ 247.792463][T10240] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 247.798713][T10240] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 247.798798][T10240] alloc_pages_vma+0x3ce/0x620 [ 247.798817][T10240] do_huge_pmd_anonymous_page+0x48a/0x1a50 [ 247.798834][T10240] ? mark_lock+0xc2/0x1220 [ 247.809822][T10240] ? __kasan_check_read+0x11/0x20 [ 247.825039][T10240] ? prep_transhuge_page+0xa0/0xa0 [ 247.830151][T10240] ? pmd_val+0x100/0x100 [ 247.834398][T10240] __handle_mm_fault+0x3073/0x3da0 [ 247.839526][T10240] ? vm_iomap_memory+0x1a0/0x1a0 [ 247.844482][T10240] ? handle_mm_fault+0x292/0xa50 [ 247.849448][T10240] ? handle_mm_fault+0x7a0/0xa50 [ 247.854404][T10240] ? __kasan_check_read+0x11/0x20 [ 247.859444][T10240] handle_mm_fault+0x3b2/0xa50 [ 247.864235][T10240] __do_page_fault+0x536/0xd80 [ 247.869031][T10240] do_page_fault+0x38/0x590 [ 247.873554][T10240] page_fault+0x39/0x40 [ 247.877735][T10240] RIP: 0010:__put_user_4+0x1c/0x30 [ 247.882888][T10240] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1e 02 00 48 8b 9b d0 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 247.902502][T10240] RSP: 0018:ffffc9000808fe18 EFLAGS: 00010293 [ 247.908584][T10240] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000140 [ 247.916566][T10240] RDX: 0000000000000059 RSI: ffffffff81a1da81 RDI: 0000000000000282 01:04:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 247.924573][T10240] RBP: ffffc9000808fee0 R08: 0000000000000001 R09: ffff8880a7e00950 [ 247.932556][T10240] R10: fffffbfff14f33c0 R11: ffffffff8a799e07 R12: 0000000000000000 [ 247.940537][T10240] R13: 0000000000000004 R14: 0000000000000005 R15: 0000000000000000 [ 247.948547][T10240] ? __might_fault+0x1a1/0x1e0 [ 247.953332][T10240] ? __sys_socketpair+0x11f/0x5d0 [ 247.958365][T10240] ? __ia32_sys_socket+0xb0/0xb0 [ 247.958384][T10240] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.958397][T10240] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 247.958411][T10240] ? do_syscall_64+0x26/0x790 [ 247.958427][T10240] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.958439][T10240] ? do_syscall_64+0x26/0x790 [ 247.958463][T10240] __x64_sys_socketpair+0x97/0xf0 [ 247.958481][T10240] do_syscall_64+0xfa/0x790 [ 247.958498][T10240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.958507][T10240] RIP: 0033:0x45a919 [ 247.958521][T10240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.958527][T10240] RSP: 002b:00007fdc13830c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 247.958541][T10240] RAX: ffffffffffffffda RBX: 00007fdc13830c90 RCX: 000000000045a919 [ 247.958549][T10240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 247.958556][T10240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.958569][T10240] R10: 0000000020000140 R11: 0000000000000246 R12: 00007fdc138316d4 [ 247.968936][T10240] R13: 00000000004caab3 R14: 00000000004e3d90 R15: 0000000000000003 [ 247.973902][T10245] FAULT_INJECTION: forcing a failure. [ 247.973902][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 247.979866][T10245] CPU: 0 PID: 10245 Comm: syz-executor.1 Not tainted 5.5.0-rc2-syzkaller #0 [ 248.029327][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.029334][T10245] Call Trace: [ 248.029358][T10245] dump_stack+0x197/0x210 [ 248.029379][T10245] should_fail.cold+0xa/0x15 [ 248.029398][T10245] ? fault_create_debugfs_attr+0x180/0x180 [ 248.029416][T10245] ? ___might_sleep+0x163/0x2c0 [ 248.029435][T10245] __should_failslab+0x121/0x190 [ 248.029452][T10245] should_failslab+0x9/0x14 [ 248.029465][T10245] kmem_cache_alloc_node+0x268/0x740 [ 248.029479][T10245] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 248.029499][T10245] __alloc_skb+0xd5/0x5e0 [ 248.029520][T10245] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 248.162448][T10245] netlink_ack+0x25c/0xb50 [ 248.166883][T10245] ? netlink_sendmsg+0xea0/0xea0 [ 248.171936][T10245] ? xfrm_netlink_rcv+0x61/0x90 [ 248.176809][T10245] netlink_rcv_skb+0x376/0x450 [ 248.181588][T10245] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 248.187352][T10245] ? netlink_ack+0xb50/0xb50 [ 248.191963][T10245] xfrm_netlink_rcv+0x70/0x90 [ 248.196639][T10245] netlink_unicast+0x58c/0x7d0 [ 248.201415][T10245] ? netlink_attachskb+0x870/0x870 [ 248.201434][T10245] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 248.201450][T10245] ? __check_object_size+0x3d/0x437 [ 248.201468][T10245] netlink_sendmsg+0x91c/0xea0 [ 248.201489][T10245] ? netlink_unicast+0x7d0/0x7d0 [ 248.201505][T10245] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 248.201521][T10245] ? apparmor_socket_sendmsg+0x2a/0x30 [ 248.201533][T10245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.201551][T10245] ? security_socket_sendmsg+0x8d/0xc0 [ 248.249891][T10245] ? netlink_unicast+0x7d0/0x7d0 [ 248.254851][T10245] sock_sendmsg+0xd7/0x130 [ 248.259308][T10245] ____sys_sendmsg+0x753/0x880 [ 248.264105][T10245] ? kernel_sendmsg+0x50/0x50 [ 248.268800][T10245] ? __fget+0x35d/0x550 [ 248.272968][T10245] ? find_held_lock+0x35/0x130 [ 248.277891][T10245] ___sys_sendmsg+0x100/0x170 [ 248.282598][T10245] ? sendmsg_copy_msghdr+0x70/0x70 [ 248.287744][T10245] ? __kasan_check_read+0x11/0x20 [ 248.292786][T10245] ? __fget+0x37f/0x550 [ 248.296975][T10245] ? ksys_dup3+0x3e0/0x3e0 [ 248.301416][T10245] ? __fget_light+0x1a9/0x230 [ 248.306101][T10245] ? __fdget+0x1b/0x20 [ 248.310182][T10245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 248.316434][T10245] __sys_sendmsg+0x105/0x1d0 [ 248.321032][T10245] ? __sys_sendmsg_sock+0xc0/0xc0 [ 248.326073][T10245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 248.331542][T10245] ? do_syscall_64+0x26/0x790 [ 248.336222][T10245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.342300][T10245] ? do_syscall_64+0x26/0x790 [ 248.346992][T10245] __x64_sys_sendmsg+0x78/0xb0 [ 248.351774][T10245] do_syscall_64+0xfa/0x790 [ 248.356303][T10245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.362214][T10245] RIP: 0033:0x45a919 [ 248.366116][T10245] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.385727][T10245] RSP: 002b:00007fd044d07c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.394146][T10245] RAX: ffffffffffffffda RBX: 00007fd044d07c90 RCX: 000000000045a919 [ 248.402131][T10245] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 248.410113][T10245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.418091][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd044d086d4 [ 248.426070][T10245] R13: 00000000004c9a63 R14: 00000000004e1828 R15: 0000000000000004 01:04:12 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffd6d) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ppoll(&(0x7f00000000c0), 0x2, 0x0, &(0x7f0000000140), 0xfffffffffffffedd) 01:04:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:12 executing program 2 (fault-call:0 fault-nth:4): socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 01:04:12 executing program 1 (fault-call:1 fault-nth:4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x74204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) lseek(r4, 0xff, 0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000000)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) ioctl$PPPIOCDISCONN(r7, 0x7439) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000000080)={0x8, 0x3, 0x80, @remote, 'bcsf0\x00'}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x222, 0x0) 01:04:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x3, 0x7}, 0x0) getdents(r2, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_open_dev$amidi(&(0x7f0000001780)='/dev/amidi#\x00', 0x3, 0x193102) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001800)="c815890fd072613fd8104fabb7ce8c4701e04133eb040000009c36d5c3fd938a4d244e7aa2b969aa9631a47bd9d6f2168a32d393") openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000015c0)=[&(0x7f0000001400)='/dev/nullb0\x00', &(0x7f0000001440)='@wlan1trusted-cgroup\x00', &(0x7f0000001500)='vmnet0\x00', &(0x7f0000001540)='lovmnet1---bdevmime_typebdev:wlan0}}\x00', &(0x7f0000001580)='md5sum{\'usercgroupself-{wlan0\x00'], &(0x7f0000001740)=[&(0x7f0000001600)='!em0\x00', &(0x7f0000001640)='self\x00', &(0x7f0000001680)='bdev@trustedself]-]#\xdd*losystem&,vboxnet0-\x00', &(0x7f00000016c0)='\'cpusetppp1}.*\x00', &(0x7f0000001700)='/dev/nullb0\x00'], 0x100) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_open_procfs(0x0, &(0x7f0000001b00)='ns\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') [ 250.211821][T10275] FAULT_INJECTION: forcing a failure. [ 250.211821][T10275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.213575][T10271] FAULT_INJECTION: forcing a failure. [ 250.213575][T10271] name failslab, interval 1, probability 0, space 0, times 0 01:04:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 250.276902][T10275] CPU: 0 PID: 10275 Comm: syz-executor.2 Not tainted 5.5.0-rc2-syzkaller #0 [ 250.285627][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.295700][T10275] Call Trace: [ 250.299011][T10275] dump_stack+0x197/0x210 [ 250.303379][T10275] should_fail.cold+0xa/0x15 [ 250.308005][T10275] ? fault_create_debugfs_attr+0x180/0x180 [ 250.313824][T10275] ? ___might_sleep+0x163/0x2c0 [ 250.318704][T10275] should_fail_alloc_page+0x50/0x60 [ 250.323923][T10275] __alloc_pages_nodemask+0x1a1/0x910 [ 250.329324][T10275] ? __alloc_pages_slowpath+0x2920/0x2920 [ 250.335053][T10275] ? lock_downgrade+0x920/0x920 [ 250.339916][T10275] ? __kasan_check_read+0x11/0x20 [ 250.344937][T10275] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 250.351196][T10275] alloc_pages_current+0x107/0x210 [ 250.356326][T10275] pte_alloc_one+0x1b/0x1a0 [ 250.360857][T10275] do_huge_pmd_anonymous_page+0x665/0x1a50 [ 250.366678][T10275] ? mark_lock+0xc2/0x1220 [ 250.371116][T10275] ? __kasan_check_read+0x11/0x20 [ 250.376172][T10275] ? prep_transhuge_page+0xa0/0xa0 [ 250.381313][T10275] __handle_mm_fault+0x3073/0x3da0 [ 250.386443][T10275] ? vm_iomap_memory+0x1a0/0x1a0 [ 250.391395][T10275] ? handle_mm_fault+0x292/0xa50 [ 250.396355][T10275] ? handle_mm_fault+0x7a0/0xa50 [ 250.401307][T10275] ? __kasan_check_read+0x11/0x20 [ 250.406342][T10275] handle_mm_fault+0x3b2/0xa50 [ 250.411122][T10275] __do_page_fault+0x536/0xd80 [ 250.415926][T10275] do_page_fault+0x38/0x590 [ 250.420450][T10275] page_fault+0x39/0x40 [ 250.424738][T10275] RIP: 0010:__put_user_4+0x1c/0x30 [ 250.429859][T10275] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1e 02 00 48 8b 9b d0 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 250.449481][T10275] RSP: 0018:ffffc9000843fe18 EFLAGS: 00010293 [ 250.455551][T10275] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000140 [ 250.463528][T10275] RDX: 0000000000000059 RSI: ffffffff81a1da81 RDI: 0000000000000282 01:04:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 250.471516][T10275] RBP: ffffc9000843fee0 R08: 0000000000000001 R09: ffff8880557f6ed0 [ 250.479501][T10275] R10: fffffbfff14f33c0 R11: ffffffff8a799e07 R12: 0000000000000000 [ 250.487495][T10275] R13: 0000000000000004 R14: 0000000000000005 R15: 0000000000000000 [ 250.495500][T10275] ? __might_fault+0x1a1/0x1e0 [ 250.500334][T10275] ? __sys_socketpair+0x11f/0x5d0 [ 250.505368][T10275] ? __ia32_sys_socket+0xb0/0xb0 [ 250.510320][T10275] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 250.515787][T10275] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 250.521256][T10275] ? do_syscall_64+0x26/0x790 [ 250.525949][T10275] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.532067][T10275] ? do_syscall_64+0x26/0x790 [ 250.536765][T10275] __x64_sys_socketpair+0x97/0xf0 [ 250.541794][T10275] do_syscall_64+0xfa/0x790 [ 250.546303][T10275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.552463][T10275] RIP: 0033:0x45a919 [ 250.556361][T10275] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.575974][T10275] RSP: 002b:00007fdc13830c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 250.584402][T10275] RAX: ffffffffffffffda RBX: 00007fdc13830c90 RCX: 000000000045a919 [ 250.592384][T10275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 250.600374][T10275] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.608366][T10275] R10: 0000000020000140 R11: 0000000000000246 R12: 00007fdc138316d4 [ 250.616354][T10275] R13: 00000000004caab3 R14: 00000000004e3d90 R15: 0000000000000003 [ 250.637672][T10271] CPU: 1 PID: 10271 Comm: syz-executor.1 Not tainted 5.5.0-rc2-syzkaller #0 [ 250.646396][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.656459][T10271] Call Trace: [ 250.659780][T10271] dump_stack+0x197/0x210 [ 250.664215][T10271] should_fail.cold+0xa/0x15 [ 250.668828][T10271] ? fault_create_debugfs_attr+0x180/0x180 [ 250.674656][T10271] ? ___might_sleep+0x163/0x2c0 [ 250.679532][T10271] __should_failslab+0x121/0x190 [ 250.684489][T10271] should_failslab+0x9/0x14 [ 250.689008][T10271] kmem_cache_alloc_node_trace+0x274/0x750 [ 250.694830][T10271] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 250.700825][T10271] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 250.706669][T10271] __kmalloc_node_track_caller+0x3d/0x70 [ 250.712327][T10271] __kmalloc_reserve.isra.0+0x40/0xf0 [ 250.717731][T10271] __alloc_skb+0x10b/0x5e0 [ 250.722255][T10271] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 250.727835][T10271] netlink_ack+0x25c/0xb50 [ 250.732272][T10271] ? netlink_sendmsg+0xea0/0xea0 [ 250.737231][T10271] ? xfrm_netlink_rcv+0x61/0x90 [ 250.742109][T10271] netlink_rcv_skb+0x376/0x450 [ 250.746913][T10271] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 250.752657][T10271] ? netlink_ack+0xb50/0xb50 [ 250.757279][T10271] xfrm_netlink_rcv+0x70/0x90 [ 250.761980][T10271] netlink_unicast+0x58c/0x7d0 [ 250.766760][T10271] ? netlink_attachskb+0x870/0x870 [ 250.771883][T10271] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 250.777598][T10271] ? __check_object_size+0x3d/0x437 [ 250.782791][T10271] netlink_sendmsg+0x91c/0xea0 [ 250.787546][T10271] ? netlink_unicast+0x7d0/0x7d0 [ 250.792471][T10271] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 250.798005][T10271] ? apparmor_socket_sendmsg+0x2a/0x30 [ 250.803452][T10271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.809677][T10271] ? security_socket_sendmsg+0x8d/0xc0 [ 250.815124][T10271] ? netlink_unicast+0x7d0/0x7d0 [ 250.820050][T10271] sock_sendmsg+0xd7/0x130 [ 250.824454][T10271] ____sys_sendmsg+0x753/0x880 [ 250.829215][T10271] ? kernel_sendmsg+0x50/0x50 [ 250.833874][T10271] ? __fget+0x35d/0x550 [ 250.838102][T10271] ? find_held_lock+0x35/0x130 [ 250.842859][T10271] ___sys_sendmsg+0x100/0x170 [ 250.847530][T10271] ? sendmsg_copy_msghdr+0x70/0x70 [ 250.852632][T10271] ? __kasan_check_read+0x11/0x20 [ 250.857646][T10271] ? __fget+0x37f/0x550 [ 250.861794][T10271] ? ksys_dup3+0x3e0/0x3e0 [ 250.866203][T10271] ? __fget_light+0x1a9/0x230 [ 250.870873][T10271] ? __fdget+0x1b/0x20 [ 250.874930][T10271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 250.881165][T10271] __sys_sendmsg+0x105/0x1d0 [ 250.885744][T10271] ? __sys_sendmsg_sock+0xc0/0xc0 [ 250.890767][T10271] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 250.896212][T10271] ? do_syscall_64+0x26/0x790 [ 250.900881][T10271] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.906932][T10271] ? do_syscall_64+0x26/0x790 [ 250.911604][T10271] __x64_sys_sendmsg+0x78/0xb0 [ 250.916359][T10271] do_syscall_64+0xfa/0x790 [ 250.920850][T10271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.926724][T10271] RIP: 0033:0x45a919 [ 250.930606][T10271] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.950197][T10271] RSP: 002b:00007fd044d07c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.958610][T10271] RAX: ffffffffffffffda RBX: 00007fd044d07c90 RCX: 000000000045a919 [ 250.966567][T10271] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 250.974525][T10271] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 01:04:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pread64(0xffffffffffffffff, 0x0, 0x0, 0x103f00) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x4c, 0x2, 0x2}}}, 0x18) 01:04:13 executing program 2 (fault-call:0 fault-nth:5): socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) [ 250.982482][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd044d086d4 [ 250.990441][T10271] R13: 00000000004c9a63 R14: 00000000004e1828 R15: 0000000000000004 [ 251.054713][T10295] FAULT_INJECTION: forcing a failure. [ 251.054713][T10295] name failslab, interval 1, probability 0, space 0, times 0 [ 251.081348][T10295] CPU: 0 PID: 10295 Comm: syz-executor.2 Not tainted 5.5.0-rc2-syzkaller #0 [ 251.090073][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.100117][T10295] Call Trace: [ 251.103402][T10295] dump_stack+0x197/0x210 [ 251.107724][T10295] should_fail.cold+0xa/0x15 [ 251.112306][T10295] ? fault_create_debugfs_attr+0x180/0x180 [ 251.118102][T10295] ? ___might_sleep+0x163/0x2c0 [ 251.122945][T10295] __should_failslab+0x121/0x190 [ 251.127874][T10295] should_failslab+0x9/0x14 [ 251.132364][T10295] kmem_cache_alloc+0x2aa/0x710 [ 251.137202][T10295] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 251.143454][T10295] ptlock_alloc+0x20/0x70 [ 251.147771][T10295] pte_alloc_one+0x6d/0x1a0 [ 251.152270][T10295] do_huge_pmd_anonymous_page+0x665/0x1a50 [ 251.158060][T10295] ? mark_lock+0xc2/0x1220 [ 251.162461][T10295] ? __kasan_check_read+0x11/0x20 [ 251.167474][T10295] ? prep_transhuge_page+0xa0/0xa0 [ 251.172577][T10295] __handle_mm_fault+0x3073/0x3da0 [ 251.177677][T10295] ? vm_iomap_memory+0x1a0/0x1a0 [ 251.182602][T10295] ? handle_mm_fault+0x292/0xa50 [ 251.187531][T10295] ? handle_mm_fault+0x7a0/0xa50 [ 251.192456][T10295] ? __kasan_check_read+0x11/0x20 [ 251.197471][T10295] handle_mm_fault+0x3b2/0xa50 [ 251.202229][T10295] __do_page_fault+0x536/0xd80 [ 251.207001][T10295] do_page_fault+0x38/0x590 [ 251.211502][T10295] page_fault+0x39/0x40 [ 251.215644][T10295] RIP: 0010:__put_user_4+0x1c/0x30 [ 251.220742][T10295] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1e 02 00 48 8b 9b d0 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 251.240345][T10295] RSP: 0018:ffffc9000c4a7e18 EFLAGS: 00010293 [ 251.246405][T10295] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000140 [ 251.254384][T10295] RDX: 0000000000000059 RSI: ffffffff81a1da81 RDI: 0000000000000282 [ 251.262354][T10295] RBP: ffffc9000c4a7ee0 R08: 0000000000000001 R09: ffff88805dc6cc90 [ 251.270314][T10295] R10: fffffbfff14f33c0 R11: ffffffff8a799e07 R12: 0000000000000000 [ 251.278272][T10295] R13: 0000000000000004 R14: 0000000000000005 R15: 0000000000000000 [ 251.286262][T10295] ? __might_fault+0x1a1/0x1e0 [ 251.291021][T10295] ? __sys_socketpair+0x11f/0x5d0 [ 251.296034][T10295] ? __ia32_sys_socket+0xb0/0xb0 [ 251.300967][T10295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 251.306414][T10295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 251.311859][T10295] ? do_syscall_64+0x26/0x790 [ 251.316527][T10295] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.322591][T10295] ? do_syscall_64+0x26/0x790 [ 251.327275][T10295] __x64_sys_socketpair+0x97/0xf0 [ 251.332331][T10295] do_syscall_64+0xfa/0x790 [ 251.336831][T10295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.342709][T10295] RIP: 0033:0x45a919 [ 251.346595][T10295] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.366187][T10295] RSP: 002b:00007fdc13830c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 251.374587][T10295] RAX: ffffffffffffffda RBX: 00007fdc13830c90 RCX: 000000000045a919 [ 251.382560][T10295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 251.390521][T10295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.398502][T10295] R10: 0000000020000140 R11: 0000000000000246 R12: 00007fdc138316d4 01:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:14 executing program 2 (fault-call:0 fault-nth:6): socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) [ 251.406459][T10295] R13: 00000000004caab3 R14: 00000000004e3d90 R15: 0000000000000003 01:04:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x3aa}, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5e}, 0x0, 0x0, 0x3, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) open_by_handle_at(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="e1ffffff920517a8126830487cf9f4480632c7dff62ece99a01a65ea8399190300e6212bd2f6e13fd8f37cedeef9530aea3de85d96090709edd2cbf3b09468f5dad8a0bfc41c14aca44f75ed4ac5c6cc0342ed4f9d92290e0fe5d1573e3551fc8773f2119f4fed3efdac00000000e1bc32df810600516f84df67a76274c2dc5468c7636403ba77dbbd6cb2856eafffde223ffbe06bf1150245aad9d4e1ed87ee89f50da9e05274605700"/187], 0x40242) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000000)={0xc3, 0x9}, &(0x7f0000000140)) 01:04:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x8, &(0x7f0000000000)=0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x802, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x420000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0x9, 0x10001, 0x4, 0x4}, 0x0, &(0x7f00000003c0)={0x8, 0x5, 0x5, 0x7ff, 0x38b6, 0xe807, 0x8001, 0xfffffffffffffff7}, &(0x7f0000001680)={r3, r4+30000000}, &(0x7f0000001700)={&(0x7f00000016c0), 0x8}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001740)='/dev/nullb0\x00', 0x11103, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000300)) socket$packet(0x11, 0x0, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000001cc0)) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 251.632313][T10308] FAULT_INJECTION: forcing a failure. [ 251.632313][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 251.704544][T10308] CPU: 0 PID: 10308 Comm: syz-executor.2 Not tainted 5.5.0-rc2-syzkaller #0 [ 251.713275][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.723343][T10308] Call Trace: [ 251.726650][T10308] dump_stack+0x197/0x210 [ 251.731009][T10308] should_fail.cold+0xa/0x15 [ 251.735619][T10308] ? fault_create_debugfs_attr+0x180/0x180 [ 251.741462][T10308] ? ___might_sleep+0x163/0x2c0 [ 251.746329][T10308] __should_failslab+0x121/0x190 [ 251.751275][T10308] ? sock_free_inode+0x30/0x30 [ 251.756052][T10308] should_failslab+0x9/0x14 [ 251.760580][T10308] kmem_cache_alloc+0x2aa/0x710 [ 251.765889][T10308] ? __might_fault+0x12b/0x1e0 [ 251.770684][T10308] ? find_held_lock+0x35/0x130 [ 251.775471][T10308] ? sock_free_inode+0x30/0x30 [ 251.780247][T10308] sock_alloc_inode+0x1c/0x1d0 [ 251.785091][T10308] alloc_inode+0x68/0x1e0 [ 251.789439][T10308] new_inode_pseudo+0x19/0xf0 [ 251.794122][T10308] sock_alloc+0x41/0x270 [ 251.798379][T10308] __sock_create+0xc2/0x730 [ 251.802893][T10308] __sys_socketpair+0x1ea/0x5d0 [ 251.807750][T10308] ? __ia32_sys_socket+0xb0/0xb0 [ 251.812695][T10308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 251.818176][T10308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 251.823644][T10308] ? do_syscall_64+0x26/0x790 [ 251.828327][T10308] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.834397][T10308] ? do_syscall_64+0x26/0x790 [ 251.839085][T10308] __x64_sys_socketpair+0x97/0xf0 [ 251.844117][T10308] do_syscall_64+0xfa/0x790 [ 251.848633][T10308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.854530][T10308] RIP: 0033:0x45a919 [ 251.858429][T10308] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.878043][T10308] RSP: 002b:00007fdc13830c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 251.886463][T10308] RAX: ffffffffffffffda RBX: 00007fdc13830c90 RCX: 000000000045a919 [ 251.894438][T10308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 251.902423][T10308] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.910402][T10308] R10: 0000000020000140 R11: 0000000000000246 R12: 00007fdc138316d4 [ 251.918380][T10308] R13: 00000000004caab3 R14: 00000000004e3d90 R15: 0000000000000003 [ 252.004707][T10308] socket: no more sockets 01:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x3aa}, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5e}, 0x0, 0x0, 0x3, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) open_by_handle_at(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="e1ffffff920517a8126830487cf9f4480632c7dff62ece99a01a65ea8399190300e6212bd2f6e13fd8f37cedeef9530aea3de85d96090709edd2cbf3b09468f5dad8a0bfc41c14aca44f75ed4ac5c6cc0342ed4f9d92290e0fe5d1573e3551fc8773f2119f4fed3efdac00000000e1bc32df810600516f84df67a76274c2dc5468c7636403ba77dbbd6cb2856eafffde223ffbe06bf1150245aad9d4e1ed87ee89f50da9e05274605700"/187], 0x40242) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000000)={0xc3, 0x9}, &(0x7f0000000140)) 01:04:14 executing program 2 (fault-call:0 fault-nth:7): socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 01:04:14 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)="100000400300000040", 0x9}]) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000100)={0x20, 0x101, 0x0, 0x3, 0x1ff, 0x3}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x180000) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000040)={0x2, 0x3, [0xfff, 0x5, 0x8, 0x0, 0x80000001, 0x36, 0x61, 0x8000]}) 01:04:15 executing program 2: socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 01:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x2, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:15 executing program 5: syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200"/16]}}, 0x0) r0 = gettid() mkdir(&(0x7f0000000180)='./file0\x00', 0x90) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x14000, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) chdir(&(0x7f0000000380)='./file0\x00') r1 = getpid() r2 = socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$sock_proto_private(r2, 0x89ee, &(0x7f0000000540)="494fcc35489c00775de72e49c8b0eabe4cf18d2c45734d7055dbb961059ac63f98a2a2219e32948c63f5e1824ef19a3881b16dfc776184155c657369714b39381834de5ddca4a8f402109737c85fd2333b32c78309c4cfb57a5d71a9f964c019370ab4336710d49235e34a13d0a91cf37cc927cdf0b2a800e006ab2129729ab467f786d172c887ff9be814d47736af3c35ed5614e0d701efef0d1f90d6b5f7cbc4717bfec10f6f1985a857c3fb7db30a9dde0fcff0242accaaec44daf7cabb49d3a3c9dfc8cc7bca07e09b115ee0a0cbd3c77a1ef2672193a9b727836f3649") sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="9be90b"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) sendfile(r3, r3, &(0x7f0000000240), 0x2008000fffffffe) getrusage(0xffffffffffffffff, &(0x7f0000000480)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={r6, 0xa4, "e053ca5f6edcb0da1d73d45ba6eec91c754f7b6976b26fad3374a7aa18f287a687ef6479e60b6faeab3bb7a3f0bb81593680249942ef4ff4789adbc1f9ccc887f6ec8ba118592bea85cf70613059c6c5cf6aaed87e3933c89781fd34f3d2c82e94beff03bfbe57f6a6b97297cf40cf6892eaaf908426b106adaa9ee376b3f97094ac334b7ace76bebe6e9d5aadb6e955b6702e93d58d3e74d53ec7a1abc3dfed8de0b53e"}, &(0x7f0000000140)=0xac) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000700)={r7, 0xd1, "0cc2248407faf5667cddb6dd298b92964ff2445e884fb97c59e7cedad139b1df2d9faaf05fa9322f73204414a08ff009efe2feeb078e8920bb148f852304b1439628b77405a094407f4945720a59798850e73065de207173989414daf5fd8494151e63df0e26822447450278fb332d52b70f647af16a08f3b6ae02bc8b457c96eeefc0a8a7a819abb1ab63f00a901d0ed9ca7833b3ebfe5b6a470bc954e191df20f2bc1d0f784f8ab808d9bc1a731ecda74b131156a1b1dce0d19185b5ae6f841411d24318b7892e982c3f9db4ca5248f7"}, &(0x7f0000000200)=0xd9) 01:04:15 executing program 2: socketpair(0x2, 0x0, 0x0, &(0x7f0000000140)) 01:04:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x8, &(0x7f0000000000)=0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x802, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x420000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0x9, 0x10001, 0x4, 0x4}, 0x0, &(0x7f00000003c0)={0x8, 0x5, 0x5, 0x7ff, 0x38b6, 0xe807, 0x8001, 0xfffffffffffffff7}, &(0x7f0000001680)={r3, r4+30000000}, &(0x7f0000001700)={&(0x7f00000016c0), 0x8}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001740)='/dev/nullb0\x00', 0x11103, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000300)) socket$packet(0x11, 0x0, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000001cc0)) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) 01:04:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)={0x3, 'dummy0\x00', {0x400}, 0x401}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xe5, 0x2, 0xff, "13880f60132c99e1673873dadeabe9d6", "7796ffafef296a2230ad6f137d148bb4f8abb74bc08b26c7be73a70788b1dd6d03f256921c2a1b366f63c3a70287bf1faf7f263a742ba019f1e5831ab87bfca4caa785a3efd300c3d2585481737f18d3742e819bccebde82f20182c79acdde14118da8e744112b54ee8b72d12307362c4e5f375c98e446c93a864137286d8fcfdb15be33ecd610329db66c853497bc05b5e13fc93c9d7823e731e49aa32c58c5e6072ffb4ca12c7ec130783c9a096438fde8e5de3195dd269553f43d227e90beb529b86b27aa449dcb65680c3b576a9e"}, 0xe5, 0x1) ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000080)={0x1, 0x1, 0x80000001, 0x5, 0x7}) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) 01:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:15 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000140)) 01:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:15 executing program 2: socketpair(0x14, 0x2, 0x0, &(0x7f0000000140)) 01:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0}) 01:04:16 executing program 2: socketpair(0x14, 0x3, 0x0, &(0x7f0000000140)) 01:04:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x5, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0}) 01:04:16 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000034000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0xdd2, 0x40, 0x3, 0x7bf9, 0x4}) 01:04:16 executing program 2: socketpair(0x14, 0x4, 0x0, &(0x7f0000000140)) 01:04:16 executing program 3: getpid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=ANY=[], 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000080)={0x8}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x7, 0x3, 0x80, &(0x7f0000ffd000/0x3000)=nil, 0x4}) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) 01:04:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xa, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:16 executing program 5: dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b40)=ANY=[@ANYBLOB="010800002fe0a7dfbb02e970a87f1520f3bc38a20b3d8b03cb370b0a8fd2daf474b893567850b5a5297ab0fbc4301aa9db915c045a2c51044b632e3710e5c9c3f422a19677ba8834485d3af4ff2a1eaa619428e65f3f7c453d0917954411ac30b3c805536e195aecd268e22b330d1cb749aab383f83107b4552e084b23fc04bb36bf64c9ac2c917ddf08", @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000100001006e657464657673696d000000100002006e657464657673696d30000008000300f0000000"], 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x250}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x208808b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 01:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0}) 01:04:16 executing program 2: socketpair(0x14, 0x5, 0x0, &(0x7f0000000140)) 01:04:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xe, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000280)={0x0}) [ 253.810685][T10433] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:04:16 executing program 2: socketpair(0x14, 0x6, 0x0, &(0x7f0000000140)) 01:04:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 253.917213][T10433] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000280)={0x0}) 01:04:16 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ff00ffffffffaaaaaaaaaab986dd60e30600004082fdc3cfe5e8183afffe8000000000000000000000000000aafe80000000000000000000000000009f8700907800000000fe800000000000000000000000000000d2ccde6a95824719d0bd5e9e5c0093d063ef5cce12518764eb8008e509005ece513a7db7ad487e88bbf34bfb"], 0x0) 01:04:16 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xf87fe30a83c241cb, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40020, &(0x7f0000000180)=ANY=[@ANYRES64]) 01:04:16 executing program 2: socketpair(0x14, 0x7, 0x0, &(0x7f0000000140)) 01:04:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto(0xffffffffffffffff, &(0x7f0000000000)="ab932866b006884e9c4cf01b0700f75e3257959a30887f4b805c441ebea938e536ccc7e80c00b3c739a06d189e3fe4c5328014f3ceef301acfcb0e3685db29658f59efe2a78602f181549137e517919ce2b2775f96f46d63a5edb76a73b14a5fdf7fc798401c554b7629b9fa828486b0a702207875ababf8b66bbecbd3945560b14ab8563bcc1ea8500845f293eb569ca5cd44a63f0f8ade4c7351ded69de25e61905a1f6597336d4c9cbb4ce674de7dddf1dd83c7ed013cc33b8bc1f8b67b97e7e4c2eb7e126f3dbd1f1cee68bfadcf1453a198aa4e8f5cd1302362c519", 0xde, 0x40000, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000800}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x68, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000220029080000000000c900000400000008000c0000000000f6d6ee92a7930f516b60526ec71df8145467ba4fc2737c3ae2ae4282681f9053caa90bec122f1af4bbf5df1ebd682d68183827a46c8440e687b3bd3f9699691669f94aa25e33e8bc29b347120c0fb59d28bd1db38a08e02f94399aa0d5eed01ed33dc6ce1db3b20100a039dcd0126126c7e6bcff42480c88f0bb789340c2d7bedd4d9bff9d3d01d8b6bfb254de7675779fceae8b8c7acab4be1fd3aae57c16f685d3e310624452aabf256afa0f797c9135c1a57bffdc4d2dc8a30c1f8451902a60a7e7f2ead3517f1fdcc0ea934e62e6f9903390e135576f2ad9ea85c40c3ac13941b6cb98550700000000000000c107bf5cd0ba2c525df4e15d8f323f655d5cecaed3a04b9bfcc2a0643cb8ab9f2524f7d5ae885722e53106850770b7dbe2e822bf6750f38cf30edc6586bfc451c630d3b65a4e9af79dc1172ee26e35302c70d1b58502115d331c7651c6f442cf4fca71ed0bad749f63e44a940aa5b0fa2c7a5ccdb60c1546346ae8ea3e58c93701b3da16cd590d021e9a453377ca88196b114aa8c476a260f8aca06254492b46a8ea188939f8560d51f3357c3a04863de058419b0c4248eb0020e490db61b007fde66aaf1972ede4bd35ca8e6dd576fdaf9f88a917846d41a1859ba6d86858b97e3ffd1611978b94ca5de2680ff4"], 0x1c}, 0x1, 0xfdffffff00000000}, 0x0) 01:04:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x60, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 254.161339][T10458] devpts: called with bogus options 01:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000280)={0x0}) 01:04:17 executing program 2: socketpair(0x14, 0x8, 0x0, &(0x7f0000000140)) 01:04:17 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x400020, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) prctl$PR_CAPBSET_DROP(0x18, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) r2 = syz_open_dev$vcsn(0x0, 0xffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/60, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000001c0)={0xfff80000, &(0x7f00000000c0)="b8be8a2bd22cc49f92114419f58fe17fce0bb44179d3b8960f7d25"}) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0x8, 0x2) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x100000000) io_setup(0x8, &(0x7f0000000140)) dup2(r3, r4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r2}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:04:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') getdents(0xffffffffffffffff, &(0x7f0000000000)=""/32, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x3, 0x0, 0x0, 0xff, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000400)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000380)={{0x1, 0x0, @reserved="0445b62a3eaf75654f65802346c7ddd65c1adc1f5ad14e6af66c8eb3e485600e"}}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) 01:04:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:17 executing program 2: socketpair(0x14, 0x9, 0x0, &(0x7f0000000140)) 01:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, 0x0) [ 254.566749][T10482] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.661412][T10482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:17 executing program 2: socketpair(0x14, 0xa, 0x0, &(0x7f0000000140)) 01:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, 0x0) [ 254.738257][T10482] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.833517][T10482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto(0xffffffffffffffff, &(0x7f0000000000)="ab932866b006884e9c4cf01b0700f75e3257959a30887f4b805c441ebea938e536ccc7e80c00b3c739a06d189e3fe4c5328014f3ceef301acfcb0e3685db29658f59efe2a78602f181549137e517919ce2b2775f96f46d63a5edb76a73b14a5fdf7fc798401c554b7629b9fa828486b0a702207875ababf8b66bbecbd3945560b14ab8563bcc1ea8500845f293eb569ca5cd44a63f0f8ade4c7351ded69de25e61905a1f6597336d4c9cbb4ce674de7dddf1dd83c7ed013cc33b8bc1f8b67b97e7e4c2eb7e126f3dbd1f1cee68bfadcf1453a198aa4e8f5cd1302362c519", 0xde, 0x40000, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000800}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x68, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0xfdffffff00000000}, 0x0) 01:04:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x500, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:17 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000240)) 01:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, 0x0) 01:04:17 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x400020, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) prctl$PR_CAPBSET_DROP(0x18, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) r2 = syz_open_dev$vcsn(0x0, 0xffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/60, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000001c0)={0xfff80000, &(0x7f00000000c0)="b8be8a2bd22cc49f92114419f58fe17fce0bb44179d3b8960f7d25"}) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0x8, 0x2) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x100000000) io_setup(0x8, &(0x7f0000000140)) dup2(r3, r4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r2}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:04:17 executing program 2: socketpair(0x14, 0xb, 0x0, &(0x7f0000000140)) 01:04:17 executing program 4 (fault-call:6 fault-nth:0): clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xa00, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:18 executing program 2: socketpair(0x14, 0xc, 0x0, &(0x7f0000000140)) 01:04:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xe00, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x8, r0, 0x2, &(0x7f0000000280)={0x0}) [ 255.425832][T10542] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.491605][T10542] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:18 executing program 5: gettid() sysinfo(&(0x7f0000000000)=""/22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000040)=0x7, 0x401c, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000377000/0x1000)=nil, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1}, 0xffffffffffffff3c, 0x0, 0x344, 0x0, 0x0, 0x40020}, 0x40804) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) mbind(&(0x7f00008cd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x3, 0x5, 0x1) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags}) 01:04:18 executing program 2: socketpair(0x14, 0xd, 0x0, &(0x7f0000000140)) 01:04:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) flistxattr(r1, &(0x7f00000047c0)=""/13, 0xd) openat$mixer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_timedsend(0xffffffffffffffff, &(0x7f0000001080)="7e854fb94c5e604ff57e510d99672bb84674144b9e92b93e3c7da9b826ac23477d337b3c394ca8f948954a480263c396ac6f5a0097c87bc25b5c7a38ecd2880f4f74e7ba9724eb89f0d686179d1f2644dabddf937ccd01bf871124c5ff9441a09329c87f2a7959a26ccb9bae819eb1104970996e56e54b6dfd7c65a14424bf85bfb3c4a3e4ad0244e4bac3df94776618", 0x90, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) flistxattr(r3, &(0x7f00000047c0)=""/13, 0xd) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000280)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RAUTH(r6, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x0, 0x0, 0x8}}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r7}, &(0x7f00000001c0)=0x8) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r8, 0x400000001ffffffd) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000003d40)=[{{0x0, 0x8d761e3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) 01:04:18 executing program 2: socketpair(0x14, 0xe, 0x0, &(0x7f0000000140)) 01:04:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) flistxattr(r1, &(0x7f00000047c0)=""/13, 0xd) openat$mixer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_timedsend(0xffffffffffffffff, &(0x7f0000001080)="7e854fb94c5e604ff57e510d99672bb84674144b9e92b93e3c7da9b826ac23477d337b3c394ca8f948954a480263c396ac6f5a0097c87bc25b5c7a38ecd2880f4f74e7ba9724eb89f0d686179d1f2644dabddf937ccd01bf871124c5ff9441a09329c87f2a7959a26ccb9bae819eb1104970996e56e54b6dfd7c65a14424bf85bfb3c4a3e4ad0244e4bac3df94776618", 0x90, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) flistxattr(r3, &(0x7f00000047c0)=""/13, 0xd) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000280)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RAUTH(r6, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x0, 0x0, 0x8}}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r7}, &(0x7f00000001c0)=0x8) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r8, 0x400000001ffffffd) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000003d40)=[{{0x0, 0x8d761e3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) 01:04:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x10, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf00, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:19 executing program 5: gettid() sysinfo(&(0x7f0000000000)=""/22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000040)=0x7, 0x401c, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000377000/0x1000)=nil, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1}, 0xffffffffffffff3c, 0x0, 0x344, 0x0, 0x0, 0x40020}, 0x40804) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) mbind(&(0x7f00008cd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x3, 0x5, 0x1) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags}) 01:04:19 executing program 2: socketpair(0x14, 0xf, 0x0, &(0x7f0000000140)) 01:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) flistxattr(r1, &(0x7f00000047c0)=""/13, 0xd) openat$mixer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_timedsend(0xffffffffffffffff, &(0x7f0000001080)="7e854fb94c5e604ff57e510d99672bb84674144b9e92b93e3c7da9b826ac23477d337b3c394ca8f948954a480263c396ac6f5a0097c87bc25b5c7a38ecd2880f4f74e7ba9724eb89f0d686179d1f2644dabddf937ccd01bf871124c5ff9441a09329c87f2a7959a26ccb9bae819eb1104970996e56e54b6dfd7c65a14424bf85bfb3c4a3e4ad0244e4bac3df94776618", 0x90, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) flistxattr(r3, &(0x7f00000047c0)=""/13, 0xd) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000280)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RAUTH(r6, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x0, 0x0, 0x8}}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r7}, &(0x7f00000001c0)=0x8) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r8, 0x400000001ffffffd) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000003d40)=[{{0x0, 0x8d761e3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) 01:04:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x3f00, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:19 executing program 2: socketpair(0x14, 0x10, 0x0, &(0x7f0000000140)) 01:04:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4206, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x402000, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r4, 0x278, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x4) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=r2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) 01:04:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x4000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:19 executing program 2: socketpair(0x14, 0x11, 0x0, &(0x7f0000000140)) 01:04:20 executing program 2: socketpair(0x14, 0x12, 0x0, &(0x7f0000000140)) 01:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x6000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4207, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) flistxattr(r1, &(0x7f00000047c0)=""/13, 0xd) openat$mixer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_timedsend(0xffffffffffffffff, &(0x7f0000001080)="7e854fb94c5e604ff57e510d99672bb84674144b9e92b93e3c7da9b826ac23477d337b3c394ca8f948954a480263c396ac6f5a0097c87bc25b5c7a38ecd2880f4f74e7ba9724eb89f0d686179d1f2644dabddf937ccd01bf871124c5ff9441a09329c87f2a7959a26ccb9bae819eb1104970996e56e54b6dfd7c65a14424bf85bfb3c4a3e4ad0244e4bac3df94776618", 0x90, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) flistxattr(r3, &(0x7f00000047c0)=""/13, 0xd) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000280)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RAUTH(r6, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x0, 0x0, 0x8}}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r7}, &(0x7f00000001c0)=0x8) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r8, 0x400000001ffffffd) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000003d40)=[{{0x0, 0x8d761e3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) 01:04:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080), 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0x6, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x4102, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x5, 0x6, 0x3ff, 0x9}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETCAPS(r4, 0x8004500f, &(0x7f00000001c0)) ioctl$TCSETX(r2, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) read(r5, &(0x7f00000002c0)=""/187, 0x9) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000480)=@v1={0x0, @aes128, 0x3, "1fcfcc24604f07ff"}) r7 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x400000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xfffffff9}, &(0x7f0000000280)=0x8) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r10, 0x5433, 0x0) ioctl$CAPI_GET_FLAGS(r10, 0x80044323, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000400)={r9, 0x68, &(0x7f0000000380)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x4, @rand_addr="c11bd358965f8c003c4a2bc3d659f1bb", 0x7}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000440)=0x10) 01:04:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401, 0x70bd2a}, 0xd2a34a1e74bdb501}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="c300000050336db0ca18664496dd5b6aade77d32ecc56280a264f003b41530b1a458fd7245198b0cd476b50015fab47da412bed7c4b04ca2a1a97abf18242cf7b4c58b8de06909661b96fad971e14025fb67def2b6ec97c8a6d1975d8968bd9567f19fb8efb684c7c746ec6ece5f18e0ec4519e815a11db68936897e523af6c5dda2ff84dd3b54c8cc904189b79b1ce5fc6c966a5c66b52239461d0d77e1ca4b8fb9424cf72d2a1f63b9b8fb356648721cb085da01a2e21b7d400c6fafc18ee1a3cbc9a8894939dff4de949584fa5ce672dcf2d5582aed5ed92f0b7cc1d2f9afdbe9e43206ec0045b72badc3388bda08d795bbc8ca8ab1a519ac62e77698d0195b4a62c8155b5048358375f9bfd17fa61c64e63b62b2464e80d4ece1936f0f5a5cdcab06702de564217503980572c0df54c5b7aeaf75fb6090cf329a813ce4803b"], &(0x7f0000000200)=0xcb) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc0000001b0021020000000000000000ff010000000000000000000000000001e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800feec9e86"], 0xcc}, 0x8}, 0x0) 01:04:20 executing program 2: socketpair(0x14, 0x13, 0x0, &(0x7f0000000140)) 01:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x7f00, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="000040bfa10556"]) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x10, 0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x3, 0x1, 0xfffff885, 0xffffffff, 0x0}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x101, 0xfaf}, 0x8) r4 = getpgid(r1) fcntl$setown(0xffffffffffffffff, 0x8, r4) wait4(0x0, 0x0, 0x2, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000000c0)) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000280)={0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000140)={0xa, 0x80000001, {0x51, 0x8, 0x8, {0xdd22, 0x3}, {0x8000, 0x5}, @ramp={0x7, 0x4, {0x9, 0x1, 0x5, 0xf7e}}}, {0x55, 0x5, 0x58, {0x3, 0x53}, {0x7, 0x3}, @ramp={0x3, 0x6, {0xe41e, 0x800, 0x3, 0x4}}}}) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:audit_spool_t:s0\x00', 0x23, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000200)={0xa, 0x9, 0x1, 0x8}, 0xa) 01:04:20 executing program 2: socketpair(0x14, 0x14, 0x0, &(0x7f0000000140)) 01:04:20 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x61, @rand_addr=0x76, 0x4e23, 0x4, 'none\x00', 0x8, 0x80000000, 0x55}, 0x2c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3c3478d1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)="86", 0x1a000}], 0x1}, 0x0) 01:04:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xffffff00, 0x10000, 0x9, 0x1000, 0x978cd08}) close(0xffffffffffffffff) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00\x00\x00\x00\x00\b\x00', 0x10) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='memory.high\x00\x90\x80\xa4\x96\xbb\xe4\xb2\xa2\x01\xc0\xb8*Z\xef\xf8\x0e\x1f]\xf7\x10\xdb\xfe\xe4\x1d\xc6\x92\x7f\xeeK_p\t\x8c\x9f5\xd0\xef)\xd8\x04\xbf\xc2N\x1c\xf0R\xdc\r\xb1Gf\xba\xd11#<\xaf^,s\x85\x10R\x99\xc2D\xee\n\"\xf9c\x15{\xc1[\xef\x06\x8a\xcd\x9d\xc8\x90#\xd0\xe7\xe3\xe0\xa9\xf3\xc0n\x1f\xd1\x11P\xe20\xcd\x1c\xfa\xfd\xa3\xcf\x9c\xc6\xb7]\x16\xc7\xd7\xb4/\x82\xd1\xae\xd9TM\x05a\xe5\xc5U\x91\xbe\x81\xac4\x9d\x02`\xe7\xa6q\x1f@\x1f\x1f?tm\x9c\xd1\x8c\xa1\xb5\xe0`H)\x97r\xc0?y\x9cc=c`A^\x9f\xcd\xbc\xf4m>I\xae\xdf\x946\xe7M`\xeb\x9fm\xbe+n\x00\x18k\x98\xab\xd5\xeet\"d\x81\x94\x04\xf5\xeb', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:20 executing program 2: socketpair(0x14, 0x15, 0x0, &(0x7f0000000140)) 01:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:20 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x61, @rand_addr=0x76, 0x4e23, 0x4, 'none\x00', 0x8, 0x80000000, 0x55}, 0x2c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3c3478d1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)="86", 0x1a000}], 0x1}, 0x0) 01:04:20 executing program 4: clone(0x4000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ptrace(0x11, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000000)={0x0}) 01:04:20 executing program 2: socketpair(0x14, 0x16, 0x0, &(0x7f0000000140)) 01:04:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x400300, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:20 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x8) close(r3) 01:04:20 executing program 2: socketpair(0x14, 0x17, 0x0, &(0x7f0000000140)) 01:04:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000280)={0x0}) 01:04:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf0ffff, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf0ffff, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:23 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffb7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 01:04:23 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x8) close(r3) 01:04:23 executing program 2: socketpair(0x14, 0x18, 0x0, &(0x7f0000000140)) 01:04:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x1000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x73865a3a8ae2116f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendto$isdn(r3, &(0x7f00000003c0)={0x7fff, 0x8001, "1249ee4f250c925a1ad24941738896b7f7316c96eb56183bd984fb3b9f5c812da27612415984dd6d34a580c674bf9f9d7fc61ca83bf607dd35f5c8e1ff420c7f8873d4400721767dac632d6b6fd6f112dde27e62d280b92c2fbc0977bc67accf70f95dd6fd7b54e279dafeb8106603e59fddaf18fbc60517a3f002ee0e341e82b311b9cbbe8d9ba4c6cd4489f9f802aaa2504f98acb8249e84a84c0bf04ac35297408689323284151ce7ed1acbbdd35a34c32f6e2c124321149e6b76166221ad940548bec47722501590da9cf71f6a2b97eaa137ec7c7288d61a"}, 0xe2, 0x1000c010, &(0x7f00000002c0)={0x22, 0xff, 0x8, 0x7, 0x1f}, 0x6) ioctl$TCSETX(r5, 0x5433, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000200)='system_u:object_r:cgroup_t:s0\x00', 0x1e) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000140)={0x5}) 01:04:23 executing program 2: socketpair(0x14, 0x19, 0x0, &(0x7f0000000140)) 01:04:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x2000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x30000, 0xe4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00', 0x4}, 0x18) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1) clock_gettime(0x4, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x1000000000002, 0x0) ptrace$setopts(0x840a, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000000c0)={0x200, 0x10, [0xfffffb81, 0x8, 0x8, 0x1000]}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) 01:04:23 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x8) close(r3) 01:04:23 executing program 2: socketpair(0x14, 0x1a, 0x0, &(0x7f0000000140)) 01:04:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x3000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @loopback, 0x401}}}, 0x30) write(r0, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0x26) 01:04:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f00000002c0)=""/19, 0x13}], 0x5, 0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) open_by_handle_at(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="730000000200000091b0a1e8c20777c1a178799001547fee83a94d99d87fd552a7d5130f275f744171c787f5f1f29909afa5ae6a440d602538e8938058786d72df9ec218a03dc4ee3cc31108b47af073e96b8e40c6c392a0de1335fe9e0b65941ab1fa5e0825798622bd526af9e2866feaf43a3db2864911868c41b56b83bdb470a0ea38fdfe0c69e8ffaca8fa5a157bcadf95eff9e9ae57b27ee07dddacb60621a7bf32c24b8aad08d3b71b3ef7f5733f7e64a1265f20f2c46154d485909c04ed9a542a10f9a860dfce0cd3dc73a6e71311ad082c6f1bab703b22469e5de06336cef9becb398519164308bef11c555ab68abb545252710205aa191db17da1e6c4495d0b2d5d9ee05eb7044768cbeab93974b5939003f80652f4c554918e942ccc"], 0x80) r4 = accept4(r1, &(0x7f0000001580)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000001600)=0x80, 0x80000) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001640)='tls\x00', 0x4) 01:04:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x4000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:29 executing program 2: socketpair(0x14, 0x1b, 0x0, &(0x7f0000000140)) 01:04:29 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x8) close(r3) 01:04:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1203fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000272000)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x3720, 0x18, [{0xd}, {0xb}, {0xc, 0x1}, {0xa, 0x1}, {0x7}, {0xb}, {0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0xc}, {0xf}, {0x8, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x8, 0x1}, {0xc}, {0x7, 0x1}, {0xf}, {0x8, 0x1}]}) 01:04:30 executing program 2: socketpair(0x14, 0x1c, 0x0, &(0x7f0000000140)) 01:04:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) 01:04:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x5000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:30 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x8) 01:04:30 executing program 2: socketpair(0x14, 0x1d, 0x0, &(0x7f0000000140)) 01:04:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2, r1}) [ 267.515093][T11362] x86/PAT: syz-executor.5:11362 map pfn RAM range req uncached-minus for [mem 0x8bbfc000-0x8bbfdfff], got write-back [ 267.575433][T11362] x86/PAT: syz-executor.5:11362 map pfn RAM range req uncached-minus for [mem 0x8b02e000-0x8b02ffff], got write-back [ 273.568595][T11381] K: renamed from caif0 01:04:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) 01:04:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xa000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x800}) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x28) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) ptrace(0x10, r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000200)) 01:04:36 executing program 2: socketpair(0x14, 0x1e, 0x0, &(0x7f0000000140)) 01:04:36 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) 01:04:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) [ 273.657438][T11381] device K entered promiscuous mode [ 273.662873][T11381] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 01:04:36 executing program 2: socketpair(0x14, 0x21, 0x0, &(0x7f0000000140)) 01:04:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xe000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 273.760463][T11388] x86/PAT: syz-executor.5:11388 map pfn RAM range req uncached-minus for [mem 0x75b19000-0x75b1afff], got write-back 01:04:36 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') 01:04:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES16=r1], @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYPTR64, @ANYRESOCT=0x0, @ANYRES32]) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x0) ftruncate(r3, 0xb3) wait4(0x0, 0x0, 0x80000002, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0)) ptrace(0x10, r4) mlockall(0x1) ptrace$setregs(0xf, r4, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000280)={0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 01:04:36 executing program 2: socketpair(0x14, 0x22, 0x0, &(0x7f0000000140)) 01:04:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) 01:04:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) 01:04:43 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) accept4(r0, 0x0, 0x0, 0x0) 01:04:43 executing program 2: socketpair(0x14, 0x23, 0x0, &(0x7f0000000140)) 01:04:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x3f000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:43 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = getpgid(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self\x00', 0x280002, 0x0) kcmp(r1, r2, 0x0, r3, r4) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x8, 0x0, 0x2e, 0x87, 0x0, 0x9ed3, 0xb960638f58347b50, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x1ff, 0x7}, 0xf55b274648093156, 0x100000001, 0x80000001, 0x0, 0x7, 0x8, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x3c, 0x20, 0x1, 0x56, 0x0, 0x9, 0x608f9a8b8f43669, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x8fd804e186ca075c, @perf_bp={&(0x7f0000000000), 0x14}, 0x2356b72f56c6657d, 0x3, 0x17f6, 0x4, 0x3, 0x6, 0x7ff}, r1, 0x3, r5, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r6 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$void(r6, 0x5451) 01:04:43 executing program 2: socketpair(0x14, 0x24, 0x0, &(0x7f0000000140)) [ 280.939625][T11528] x86/PAT: syz-executor.5:11528 map pfn RAM range req uncached-minus for [mem 0x58acc000-0x58acdfff], got write-back 01:04:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x40000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:43 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r8) 01:04:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) 01:04:43 executing program 2: socketpair(0x14, 0x25, 0x0, &(0x7f0000000140)) 01:04:43 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x15, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) [ 281.278390][T11555] x86/PAT: syz-executor.5:11555 map pfn RAM range req uncached-minus for [mem 0x81b55000-0x81b56fff], got write-back 01:04:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0xfffffffe, 0x0, {0x0, 0x3, 0x4, 0x1, 0x5}}) 01:04:52 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) close(0xffffffffffffffff) 01:04:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x60000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:04:52 executing program 2: socketpair(0x14, 0x26, 0x0, &(0x7f0000000140)) 01:04:52 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)={0x1a}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) 01:04:53 executing program 2: socketpair(0x14, 0x27, 0x0, &(0x7f0000000140)) 01:04:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x7f000000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 290.234128][T11677] x86/PAT: syz-executor.5:11677 map pfn RAM range req uncached-minus for [mem 0x7300b000-0x7300cfff], got write-back 01:04:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:04:53 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) close(0xffffffffffffffff) 01:04:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') 01:04:53 executing program 2: socketpair(0x14, 0x28, 0x0, &(0x7f0000000140)) [ 290.510600][T11803] x86/PAT: syz-executor.5:11803 map pfn RAM range req uncached-minus for [mem 0x58afa000-0x58afbfff], got write-back 01:05:00 executing program 0: 01:05:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x9effffff, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:00 executing program 2: socketpair(0x14, 0x29, 0x0, &(0x7f0000000140)) 01:05:00 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) close(0xffffffffffffffff) 01:05:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x300f16e9a7aa086a, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0x6f, 0x8001, 0xa5ca, {r1, r2+30000000}, 0x4, 0xc94}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xc2, 0x9, 0xfb, 0xffffffe3}, {0x553, 0x4, 0x8, 0x7fffffff}, {0x3, 0x40, 0x81, 0x81}, {0x8001, 0x0, 0x8, 0x6578}, {0xffff, 0xd7, 0x0, 0x2}, {0x1000, 0x80, 0xd5, 0xffff}, {0x3, 0xfd, 0x7, 0x21e9}]}) ptrace(0x10, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0xc0000, r6}) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x20000, 0x40) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000300)={r7, 0x100000, r8}) chroot(&(0x7f0000000200)='./file0\x00') ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000180)) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$FBIOGET_VSCREENINFO(r9, 0x4600, &(0x7f0000000340)) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000280)={0x0}) 01:05:00 executing program 2: socketpair(0x14, 0x2a, 0x0, &(0x7f0000000140)) [ 297.445859][T11918] x86/PAT: syz-executor.5:11918 map pfn RAM range req uncached-minus for [mem 0x776c9000-0x776cafff], got write-back 01:05:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xf0ffffff, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:00 executing program 2: socketpair(0x14, 0x2b, 0x0, &(0x7f0000000140)) 01:05:00 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r7) 01:05:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0x8001) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 297.784624][T12044] x86/PAT: syz-executor.5:12044 map pfn RAM range req uncached-minus for [mem 0x741a3000-0x741a4fff], got write-back 01:05:06 executing program 0: 01:05:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xfffff000, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:06 executing program 2: socketpair(0x14, 0x2c, 0x0, &(0x7f0000000140)) 01:05:06 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r7) 01:05:06 executing program 4: clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:06 executing program 2: socketpair(0x14, 0x2d, 0x0, &(0x7f0000000140)) [ 303.696074][T12158] x86/PAT: syz-executor.5:12158 map pfn RAM range req uncached-minus for [mem 0x741c6000-0x741c7fff], got write-back 01:05:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xffffff7f, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:06 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r6) 01:05:06 executing program 2: socketpair(0x14, 0x2e, 0x0, &(0x7f0000000140)) 01:05:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0xfffffff8, "9f7a93e70bd51860940c433b4e67bd6874c78b2c68d241a2bcacdbdfaca20868", 0x1, 0x1}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={0x0, 0xfffffffffffffe04}) 01:05:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 304.073027][T12284] x86/PAT: syz-executor.5:12284 map pfn RAM range req uncached-minus for [mem 0x77762000-0x77763fff], got write-back 01:05:10 executing program 0: 01:05:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xffffff9e, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:10 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r6) 01:05:10 executing program 2: socketpair(0x14, 0x2f, 0x0, &(0x7f0000000140)) 01:05:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x181300) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x40, 0x612d, 0x3, 0x3}, 0x8) ptrace(0x10, r0) capget(&(0x7f0000000080)={0xf1504, r0}, &(0x7f0000000140)={0x8, 0x9, 0x1, 0x8, 0x5, 0x3}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:10 executing program 2: socketpair(0x14, 0x30, 0x0, &(0x7f0000000140)) [ 307.957617][T12400] x86/PAT: syz-executor.5:12400 map pfn RAM range req uncached-minus for [mem 0x80485000-0x80486fff], got write-back 01:05:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xfffffff0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:10 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r5) 01:05:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7c5e}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:10 executing program 2: socketpair(0x14, 0x31, 0x0, &(0x7f0000000140)) 01:05:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 308.275564][T12524] x86/PAT: syz-executor.5:12524 map pfn RAM range req uncached-minus for [mem 0x77522000-0x77523fff], got write-back 01:05:14 executing program 0: 01:05:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0xffffffff, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:14 executing program 2: socketpair(0x14, 0x32, 0x0, &(0x7f0000000140)) 01:05:14 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r5) 01:05:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r1, 0x6, 0x10) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:14 executing program 2: socketpair(0x14, 0x33, 0x0, &(0x7f0000000140)) 01:05:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 312.196603][T12640] x86/PAT: syz-executor.5:12640 map pfn RAM range req uncached-minus for [mem 0x80946000-0x80947fff], got write-back 01:05:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) ptrace$getsig(0x4202, r0, 0x3f, &(0x7f0000000000)) 01:05:15 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) ioctl$TCSETX(r4, 0x5433, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r5) 01:05:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 312.446578][T12697] x86/PAT: syz-executor.5:12697 map pfn RAM range req uncached-minus for [mem 0x776ad000-0x776aefff], got write-back 01:05:19 executing program 0: 01:05:19 executing program 2: socketpair(0x14, 0x34, 0x0, &(0x7f0000000140)) 01:05:19 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="7d0f9026801ba3ec68aed4284a610ed8394ffbf11fc26789e1936243ad97660216639954a51b65b2c0d04b05b327213f0352fb2e7930500a82b51807374c7759", &(0x7f00000000c0)="fcdc0accc1689f578c94e65735f70b691b92651403cbd8ce2322d4955003da021ed858cfe82aac67fdd8dbc3dcc4530a937ec80deb3e42709c394233f7dc553e9b8517548f80ac00bee50e5c55719d4399867503fee7aa5a142e1d776cccf8609905a8a3ffee2e690190fd48b4babb2e0d0810219b8e098c3b18fbea0ecb11e82befc298e819097ef0cc311f0203ff8d75416889f47653", 0x1}, 0x20) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r4) 01:05:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0x2c0, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:19 executing program 2: socketpair(0x14, 0x35, 0x0, &(0x7f0000000140)) 01:05:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xec0, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 316.344303][T12780] x86/PAT: syz-executor.5:12780 map pfn RAM range req uncached-minus for [mem 0x77b49000-0x77b4afff], got write-back 01:05:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x7, 0x7fff, 0x401, 0x6, 0x40], &(0x7f0000000080)=[0x0, 0x0], 0x8) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="04000000000000000500"/20]) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000180)=0x7) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f00000001c0)={{0xd, 0x1}, 0x0, 0x6, 0xe3, 0xff9, &(0x7f00000003c0)="d27f6177e268f26ea48bf2ec8e7909d8be4f40e45c90799fc6f170a4849cc48d51cb3b50879e76e729d7be9a97ce11793aa926f7a5a822ba1d61092db569df24fbda0de99c70df5985e58d29bee0f3ffddbb583885b491fdeec30219909c93a13bb667ee8ac30cf1f453de292a999e78827c53f38922edc8055b9ae4db2245d67a83caa6ef5cd14429b25f04cd086254c38c71b41b177cbf568979d4b6975d3f0bfb827f3502ccf83f503cc6bf5ccc3895462db06b539ed9486eaa1f91a6a5e67d0c73ff4cc6d2eb98114359073fc3d903fbd74fd51ae2076c1f8df5aba36e0783c4cb"}) 01:05:19 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r4) 01:05:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:19 executing program 2: socketpair(0x14, 0x36, 0x0, &(0x7f0000000140)) [ 316.641057][T12805] x86/PAT: syz-executor.5:12805 map pfn RAM range req uncached-minus for [mem 0x8f6cd000-0x8f6cefff], got write-back 01:05:23 executing program 0: 01:05:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0x33fe0, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:23 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r4) 01:05:23 executing program 2: socketpair(0x14, 0x37, 0x0, &(0x7f0000000140)) 01:05:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xfffffffffffffeba) rt_tgsigqueueinfo(r0, r3, 0x16, &(0x7f00000000c0)={0x2e, 0x800000}) ptrace(0x10, r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) ptrace$setregs(0xf, r4, 0xff3, &(0x7f0000000200)) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x6}, 0x10) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:23 executing program 2: socketpair(0x14, 0x38, 0x0, &(0x7f0000000140)) 01:05:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0x200007f8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:23 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) socket$inet6(0xa, 0x6, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r3) 01:05:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)={0x34}) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xa5e, 0x7, 0x7, 0x401, 0x10, 0x1, 0x16, 0xff, 0x7, 0x6, 0x81, 0x1}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:23 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x80000000000000bd) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r3) 01:05:27 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) 01:05:27 executing program 2: socketpair(0x14, 0x39, 0x0, &(0x7f0000000140)) 01:05:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0x7ffff000, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:27 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:27 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r3) 01:05:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000380)={0x0, 0x3, 0x5, 0x800, 0x5}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x1) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f00000003c0), 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2b0400000000000000df0000000000000000014100000018001700005b0000000000000000ff0000000000000000ee3269efc7942120307555e846bba564d5fd9f58ba28d11e211f51e180c9dcee12a1e493e229b13bd4899916856f82a7f441f7cb4e84a8c2d43a5ab9"], 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1800400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0f28bd7000ffdbdf250100000000000000094100000014001800000007657468479fffc6700d6dfd8d4bf7e66cfe74"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x4016, &(0x7f0000000000)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dlm-control\x00', 0x220000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f00000015c0)={'HL\x00'}, &(0x7f0000001600)=0x1e) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0x0, &(0x7f0000000180)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = accept4(r6, 0x0, &(0x7f00000001c0), 0x800) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000280)={0x0}) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r8, 0x6, 0x62) 01:05:27 executing program 2: socketpair(0x14, 0x3a, 0x0, &(0x7f0000000140)) 01:05:27 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:05:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xfffffdef, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:27 executing program 5: mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:27 executing program 2: socketpair(0x14, 0x3b, 0x0, &(0x7f0000000140)) 01:05:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x2, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) 01:05:36 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:05:36 executing program 5: mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x7, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:36 executing program 2: socketpair(0x14, 0x3c, 0x0, &(0x7f0000000140)) 01:05:36 executing program 4: clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = accept(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) preadv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)}], 0x3, 0x1000) r2 = getpid() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000180)) rt_sigreturn() ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) socket$xdp(0x2c, 0x3, 0x0) 01:05:36 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:05:36 executing program 5: mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:36 executing program 2: socketpair(0x14, 0x3d, 0x0, &(0x7f0000000140)) 01:05:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0xa, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:36 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r1) 01:05:36 executing program 2: socketpair(0x14, 0x3e, 0x0, &(0x7f0000000140)) [ 342.337441][T13224] x86/PAT: syz-executor.0:13224 map pfn RAM range req uncached-minus for [mem 0x8087a000-0x8087bfff], got write-back 01:05:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) 01:05:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r1) 01:05:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0xf, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:46 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4207, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000140)=""/255) 01:05:46 executing program 2: socketpair(0x14, 0x41, 0x0, &(0x7f0000000140)) 01:05:46 executing program 2: socketpair(0x14, 0x42, 0x0, &(0x7f0000000140)) [ 343.412620][T13230] QAT: Invalid ioctl 01:05:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x26, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r1) 01:05:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:46 executing program 2: socketpair(0x14, 0x43, 0x0, &(0x7f0000000140)) 01:05:46 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 343.587395][T13347] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. 01:05:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') 01:05:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:55 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:05:55 executing program 2: socketpair(0x14, 0x44, 0x0, &(0x7f0000000140)) 01:05:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4207, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:05:55 executing program 2: socketpair(0x14, 0x45, 0x0, &(0x7f0000000140)) 01:05:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x2, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:05:55 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:05:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:05:55 executing program 2: socketpair(0x14, 0x46, 0x0, &(0x7f0000000140)) 01:05:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xbd0117a7a9b71a3c, r0, 0x0, &(0x7f0000000000)="ea08fca6781cb20b2ae90b3d093612c9d363025880efd2") ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000280)={0x0}) getpid() [ 361.013594][T13708] x86/PAT: syz-executor.0:13708 map pfn RAM range req uncached-minus for [mem 0x8d888000-0x8d889fff], got write-back 01:06:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x3, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:04 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:04 executing program 2: socketpair(0x14, 0x47, 0x0, &(0x7f0000000140)) 01:06:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:04 executing program 4: clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) read$fb(r1, &(0x7f00000001c0)=""/45, 0x2d) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x4e, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5, 0xfb8, 0xd70}, &(0x7f0000000040)=0x10) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:06:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x4, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:04 executing program 3: socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:04 executing program 2: socketpair(0x14, 0x48, 0x0, &(0x7f0000000140)) 01:06:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x5, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:05 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 370.385782][T13846] x86/PAT: syz-executor.0:13846 map pfn RAM range req uncached-minus for [mem 0x747c6000-0x747c7fff], got write-back 01:06:14 executing program 2: socketpair(0x14, 0x49, 0x0, &(0x7f0000000140)) 01:06:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xa, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:14 executing program 4: clone(0x1900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0xa1800002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400400, 0x0) accept$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000080)=0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0xec, 0x1000, 0x7a, 0x9, 0x20, "90eca28773ed813d8ec77e0ab360925e4066ab", 0xfff, 0x861}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:06:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:06:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:14 executing program 2: socketpair(0x14, 0x4a, 0x0, &(0x7f0000000140)) 01:06:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xe, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:14 executing program 4: clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)={0x0, 0x4b1}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0xffffffffffffffc8}) 01:06:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:14 executing program 2: socketpair(0x14, 0x4b, 0x0, &(0x7f0000000140)) 01:06:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) [ 371.771873][T13978] cgroup: fork rejected by pids controller in /syz5 01:06:14 executing program 2: socketpair(0x14, 0x4c, 0x0, &(0x7f0000000140)) 01:06:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:06:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x60, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0x81, 0x1, 0x7}, {0x7ff, 0xd9, 0x0, 0x800}]}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) 01:06:23 executing program 2: socketpair(0x14, 0x4d, 0x0, &(0x7f0000000140)) 01:06:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:23 executing program 2: socketpair(0x14, 0x4e, 0x0, &(0x7f0000000140)) 01:06:23 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:23 executing program 2: socketpair(0x14, 0x4f, 0x0, &(0x7f0000000140)) 01:06:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x300, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:06:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x200) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140)={0x0, 0x53}, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8, 0xeaaf40f7aecc6bbb) dup2(r0, r1) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101080, 0x0) read$usbfs(r3, &(0x7f00000001c0)=""/91, 0x5b) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000040)='syz0\x00') r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$int_out(r4, 0x0, &(0x7f0000000180)) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) 01:06:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x500, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:30 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:30 executing program 2: socketpair(0x14, 0x50, 0x0, &(0x7f0000000140)) 01:06:30 executing program 2: socketpair(0x14, 0x51, 0x0, &(0x7f0000000140)) 01:06:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r1) 01:06:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xa00, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xe00, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:30 executing program 2: socketpair(0x14, 0x52, 0x0, &(0x7f0000000140)) [ 388.164589][T14366] x86/PAT: syz-executor.5:14366 map pfn RAM range req uncached-minus for [mem 0x747e1000-0x747e2fff], got write-back 01:06:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:39 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={0x0, @sco={0x1f, {0x54, 0x8, 0xff, 0x2d, 0x1, 0x9}}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, @ipx={0x4, 0x5, 0x5, "cb0519a2fd78", 0x7}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x9, 0x101}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x9, 0x4) ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000000)={0xff, 0x8, 0x4, 0x40000, {0x77359400}, {0x3, 0x1, 0x35, 0xfb, 0x4, 0x7, "62bc04f5"}, 0xfff, 0x1, @offset, 0x4}) sendmsg$xdp(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x2c, 0x0, r3, 0x12}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="e916e762dbf7c2eaf679808aff0b685c48d3a8c7e2", 0x15}, {&(0x7f00000002c0)="79551537dacd46fe0537f0b017aaefdd1505fb835c95d373934c2a74b40e5c525ca93289bc0cb6bf010984e2f970bfe3797be67a8868d4c9af2e6c84a81198e336e2939cdc7fe7138f7c77f8f45fdc55c6b4558a1d32659b2961f5ee56c3624d76a1dba789a1cbe044fb737005417aa3e7c4dab22d67ff0edc5cf1e0a5086dcd56c1844925f56937621b030f0bc3c330c8049f93a8ed41fe4f72d9aa30d11afe8605cc7ca49f4123d6ab369d1fc7f8b9954957e4", 0xb4}, {&(0x7f0000000380)="98668f22c9e03a9b21a1a36e6be8faa71be37e2321819b51a5b2", 0x1a}], 0x3, 0x0, 0x0, 0x80}, 0x4000) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:06:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r1) 01:06:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf00, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:39 executing program 2: socketpair(0x14, 0x53, 0x0, &(0x7f0000000140)) 01:06:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:39 executing program 2: socketpair(0x14, 0x54, 0x0, &(0x7f0000000140)) [ 397.163088][T14382] x86/PAT: syz-executor.5:14382 map pfn RAM range req uncached-minus for [mem 0x433db000-0x433dcfff], got write-back 01:06:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r1) 01:06:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x3f00, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:40 executing program 2: socketpair(0x14, 0x55, 0x0, &(0x7f0000000140)) 01:06:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:40 executing program 2: socketpair(0x14, 0x56, 0x0, &(0x7f0000000140)) [ 397.431066][T14502] x86/PAT: syz-executor.5:14502 map pfn RAM range req uncached-minus for [mem 0x81bc9000-0x81bcafff], got write-back [ 405.502328][T14513] x86/PAT: syz-executor.0:14513 map pfn RAM range req uncached-minus for [mem 0x842a0000-0x842a1fff], got write-back 01:06:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x4000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) 01:06:48 executing program 2: socketpair(0x14, 0x57, 0x0, &(0x7f0000000140)) 01:06:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:48 executing program 2: socketpair(0x14, 0x58, 0x0, &(0x7f0000000140)) [ 405.725622][T14527] x86/PAT: syz-executor.5:14527 map pfn RAM range req uncached-minus for [mem 0x77987000-0x77988fff], got write-back 01:06:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) 01:06:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x6000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x4000000, 0xffff3021, 0x7fffffff, 0x1, 0x8, 0x7ff}) rt_tgsigqueueinfo(r0, r0, 0x18, &(0x7f00000000c0)={0xffffffff}) ptrace(0x10, r0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x9, 0x80000) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000002400)=0xa4) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) write$FUSE_LK(r5, &(0x7f00000024c0)={0x8, 0x0, 0x1, {{0x5, 0xb5e, 0x6, r4}}}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000002340)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r6, 0x10, 0x1, @in6={0xa, 0x4e20, 0x6, @empty, 0x5}}}, 0xa0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r10, 0x5433, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r11, 0x5433, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r12, 0x5433, 0x0) ioctl$TCSETX(r8, 0x5433, 0x0) ioctl$TCSETX(r9, 0x5433, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r13, 0x5433, 0x0) getsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000002440)=0x1, &(0x7f0000002480)=0x4) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000002c0)={0x0, 0x0, 0x2080, {0x30000, 0x4000}, [], "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", "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"}) 01:06:48 executing program 2: socketpair(0x14, 0x59, 0x0, &(0x7f0000000140)) 01:06:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141000, 0x0) close(r2) [ 405.888139][T14540] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 01:06:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x7f00, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:06:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x141000, 0x0) close(r2) 01:06:55 executing program 2: socketpair(0x14, 0x5a, 0x0, &(0x7f0000000140)) 01:06:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) acct(&(0x7f0000000000)='./file0\x00') ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 412.905487][T14559] x86/PAT: syz-executor.5:14559 map pfn RAM range req uncached-minus for [mem 0x77a85000-0x77a86fff], got write-back 01:06:55 executing program 2: socketpair(0x14, 0x5b, 0x0, &(0x7f0000000140)) 01:06:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x141000, 0x0) close(r2) 01:06:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:55 executing program 2: socketpair(0x14, 0x5c, 0x0, &(0x7f0000000140)) 01:06:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x34000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:06:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x141000, 0x0) close(r2) 01:07:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000001c0)={0x2, 0x3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r2, r3, 0x15, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffc}) ptrace(0x10, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r7, 0x7fffffff}, &(0x7f0000000080)=0x8) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) 01:07:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:07:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x400300, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:02 executing program 2: socketpair(0x14, 0x5d, 0x0, &(0x7f0000000140)) 01:07:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(0xffffffffffffffff) [ 420.066769][T14696] x86/PAT: syz-executor.5:14696 map pfn RAM range req uncached-minus for [mem 0x81936000-0x81937fff], got write-back 01:07:02 executing program 2: socketpair(0x14, 0x5e, 0x0, &(0x7f0000000140)) 01:07:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf0ffff, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:03 executing program 2: socketpair(0x14, 0x5f, 0x0, &(0x7f0000000140)) [ 420.219868][T14757] x86/PAT: syz-executor.5:14757 map pfn RAM range req uncached-minus for [mem 0x79cae000-0x79caffff], got write-back 01:07:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(0xffffffffffffffff) 01:07:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) read$usbmon(r2, &(0x7f0000000000)=""/93, 0x5d) wait4(r1, 0x0, 0x1, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000280)={0x0}) 01:07:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x1000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:09 executing program 2: socketpair(0x14, 0x60, 0x0, &(0x7f0000000140)) 01:07:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(0xffffffffffffffff) 01:07:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:10 executing program 3: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000001300)={0x0, 0x5f43, 0xfff, [], &(0x7f00000012c0)=0x8a}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000200)={0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), 0x3c, 0x0, &(0x7f0000000140)=""/120, 0x78, &(0x7f00000002c0)=""/4096, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, r3, r0], 0x5}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000001380)=0x5) ptrace(0x11, r4) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001340)={0x2, 0x7}, 0xc) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:07:10 executing program 2: socketpair(0x14, 0x62, 0x0, &(0x7f0000000140)) [ 427.573903][T14860] x86/PAT: syz-executor.5:14860 map pfn RAM range req uncached-minus for [mem 0x8d469000-0x8d46afff], got write-back 01:07:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x3000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:14 executing program 3: clone(0x0, 0x0, 0x0, 0x0, 0x0) capget(0x0, 0x0) 01:07:14 executing program 2: socketpair(0x14, 0x63, 0x0, &(0x7f0000000140)) 01:07:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = socket$l2tp(0x18, 0x1, 0x1) socket(0x8, 0xa, 0x9) pipe(&(0x7f0000000340)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f0000000380)='net/rt6_stats\x00') r4 = accept4$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0xfffffffffffffde8, 0x48b548b0ca296d0c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x14001, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x7, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @local}, 0x42, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100000000, 0x2}) ioctl$TCSETX(r6, 0x5433, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r10, 0x5433, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r11, 0x5433, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x108}, {r4, 0x18437328de7e98d7}, {r5, 0x1}, {r6, 0x1}, {r8, 0xe401}, {r9, 0x1000}, {r10, 0x200}, {r11, 0x10044}], 0x8, &(0x7f0000000140), &(0x7f0000000180)={0x5}, 0x8) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:07:15 executing program 2: socketpair(0x14, 0x64, 0x0, &(0x7f0000000140)) 01:07:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x4000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 432.320342][T14982] x86/PAT: syz-executor.5:14982 map pfn RAM range req uncached-minus for [mem 0x8e801000-0x8e802fff], got write-back 01:07:15 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') syncfs(r1) 01:07:15 executing program 2: socketpair(0x14, 0x65, 0x0, &(0x7f0000000140)) 01:07:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000140)={0x800, 0x1ff, 0x0, 0x3f4, 0x1c, 0x100000001}) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="89", 0x1, r2) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)="25b974a241572ee6c2807ed93562385afe8d56c083a9a4c78afaa411f5a9e98595230755f55e6872b707615b8a8567cee2f6c5fe6adb863e2c79311ed960eabdfdf2075f2d1215dc1f987741ae6031bbbab34438551438993c33228a6c97d1b38d91c4813c7edb8399fed15df986d837cd10946c132004e266e3ae", 0x7b, r4) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x2, {0x1, 0x1e2, 0x5}, {0x84f990621dfad25f, 0x1, 0x3}, 0x1, 0x3}], 0x20) ptrace(0x10, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r5, 0xb919, 0xfffffffffffffff7) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000000380)={0x1, [[0x7, 0x2b, 0x7fffffff, 0x9, 0xec, 0x2, 0x4, 0xb93], [0x6, 0x40, 0x5, 0x200, 0x20, 0xc183, 0x49, 0x4], [0x40, 0x4, 0x3, 0x5, 0x1, 0x7, 0x4, 0xfffffffd]], [{0xfffffffe, 0x8, 0x7}, {0x7, 0xffffffff}, {0xfffffbff, 0x2, 0x1}, {0x8, 0x9}, {0x8, 0xdf6595c, 0x1}, {0x7f, 0x7ff, 0x4}, {0x9, 0x8, 0x1f}, {0x95, 0x8, 0x1}, {0x1, 0x0, 0x7f3}, {0x6, 0x2, 0x5}, {0xaf, 0x20, 0xff}, {0x20, 0x8, 0x9}], 0x9}) 01:07:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 432.592610][T15003] x86/PAT: syz-executor.5:15003 map pfn RAM range req uncached-minus for [mem 0x777e1000-0x777e2fff], got write-back 01:07:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x5000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:22 executing program 2: socketpair(0x14, 0x66, 0x0, &(0x7f0000000140)) 01:07:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x5, &(0x7f00000000c0)={0x0, 0xfffffffe}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x1) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 01:07:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x6f7d, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x9, 0x0, [], 0x7e}]}}) 01:07:22 executing program 2: socketpair(0x14, 0x67, 0x0, &(0x7f0000000140)) 01:07:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xa000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 439.440110][T15124] x86/PAT: syz-executor.5:15124 map pfn RAM range req uncached-minus for [mem 0x83c1d000-0x83c1efff], got write-back 01:07:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0xfd29) 01:07:22 executing program 2: socketpair(0x14, 0x68, 0x0, &(0x7f0000000140)) 01:07:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xe000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x2}) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ptrace$setregs(0xf, r3, 0x80, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 445.664996][T15258] x86/PAT: syz-executor.0:15258 map pfn RAM range req uncached-minus for [mem 0x79e57000-0x79e58fff], got write-back 01:07:28 executing program 0: mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0xffffffff}, 0x1c) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r1 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xa) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[], 0x0) tkill(0x0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f00000000c0)='{keyring\'cgroup$userprocposix_acl_accessnodev&!\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='v', r3}, 0x30) 01:07:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:28 executing program 2: socketpair(0x14, 0x69, 0x0, &(0x7f0000000140)) 01:07:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1a4) close(r2) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x9}, &(0x7f0000000040)=0x8) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:07:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x3f000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 445.880851][T15266] x86/PAT: syz-executor.5:15266 map pfn RAM range req uncached-minus for [mem 0x8cb8f000-0x8cb90fff], got write-back 01:07:28 executing program 2: socketpair(0x14, 0x6a, 0x0, &(0x7f0000000140)) 01:07:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpgrp(r1) rt_tgsigqueueinfo(r0, r2, 0x23, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0x1f}, 0x1) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:07:28 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:07:28 executing program 2: socketpair(0x14, 0x6b, 0x0, &(0x7f0000000140)) 01:07:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x40000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:37 executing program 2: socketpair(0x14, 0x6c, 0x0, &(0x7f0000000140)) 01:07:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:07:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x60000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:37 executing program 0: mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x4800, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000440)=""/4096) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = accept(r2, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000200)={0x1, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @local}}, [0x6, 0x7fff, 0x7, 0x3, 0x3f, 0x0, 0x8, 0x7, 0x3, 0x7, 0x100000000, 0xffffffffffff7fff, 0x6, 0x2, 0x10001]}, &(0x7f00000001c0)=0x100) ptrace$setregs(0xf, r0, 0x0, &(0x7f00000003c0)="3893ec843e62eb7c61a2f81d1492") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:07:37 executing program 2: socketpair(0x14, 0x6d, 0x0, &(0x7f0000000140)) 01:07:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x7f000000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:37 executing program 3: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) close(r2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x801, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) [ 455.134541][T15413] x86/PAT: syz-executor.5:15413 map pfn RAM range req uncached-minus for [mem 0x8f88f000-0x8f890fff], got write-back 01:07:38 executing program 2: socketpair(0x14, 0x6e, 0x0, &(0x7f0000000140)) 01:07:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x9effffff, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/17) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(0xffffffffffffffff) [ 455.489241][T15541] x86/PAT: syz-executor.5:15541 map pfn RAM range req uncached-minus for [mem 0x7f211000-0x7f212fff], got write-back 01:07:47 executing program 0: mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:47 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8804}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000100) ptrace$setregs(0xf, r0, 0x8001, &(0x7f00000006c0)="facb4eebfd6319bd441504fb5fd2fcf180010001000000c5574023f4f1c2ec547a327d0026f110512ad41d527761a24ea1d7a0a4fa1fd889248b287aad1c81b91c75b6aca5ce307ac77008020200"/90) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100000, 0x0) read$usbmon(r2, &(0x7f0000000040)=""/40, 0x28) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x70, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @rand_addr=0x9}, 0x80}, @in6={0xa, 0x4e20, 0x5, @empty, 0xa909}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}, 0x7}, @in6={0xa, 0x4e21, 0x3, @rand_addr="689bca84e5bc5c2f8227e60f0b27ea2c", 0x3a8}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000640)={r3, 0xffff, 0x2f2944f1808b9900, 0x7}, &(0x7f0000000680)=0x18) 01:07:47 executing program 2: socketpair(0x14, 0x6f, 0x0, &(0x7f0000000140)) 01:07:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xf0ffffff, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x100000) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:07:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:47 executing program 2: socketpair(0x14, 0x70, 0x0, &(0x7f0000000140)) [ 464.453084][T15554] x86/PAT: syz-executor.5:15554 map pfn RAM range req uncached-minus for [mem 0x8cee2000-0x8cee3fff], got write-back 01:07:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xfffff000, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f0000000080)=0x1000) ioctl$TCSETX(r3, 0x5433, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x66, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) 01:07:47 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x50001, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = gettid() rt_tgsigqueueinfo(r0, r2, 0x16, &(0x7f00000000c0)={0x30, 0x10003, 0xffff}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="21235d92afd9ebd5c045b65e70137fceb592f5d7f7f4daf9bf79ae4fd82dcff911ccfba6ad390102000000000000003e6a12aa5de28db2ec9113c731600b6d392a1a9b94ed386e9bb93b0458d9a108c6070dfd471ba1563b915b9d57b7395b70d0fba1b12be1e58b55c7a522cc62963b5455b1d592cbb6b7f63bbb487271ca3294436016bb17703fffab572d160adc028b1ee4e3350d30f7bde26877252e3871300b07b2096e54821733726ba2a79600000000000000") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:07:47 executing program 2: socketpair(0x14, 0x71, 0x0, &(0x7f0000000140)) 01:07:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xffffff7f, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:57 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:07:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:07:57 executing program 2: socketpair(0x14, 0x72, 0x0, &(0x7f0000000140)) 01:07:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xffffff9e, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) wait4(r0, 0x0, 0x8, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000001c0)={0x4, 0x2, 0xf8, 0x1, 0xff}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x400, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000240)) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x100800) fstat(r5, &(0x7f0000000040)) 01:07:57 executing program 2: socketpair(0x14, 0x73, 0x0, &(0x7f0000000140)) 01:07:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xfffffff0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) [ 475.075925][T15704] x86/PAT: syz-executor.5:15704 map pfn RAM range req uncached-minus for [mem 0x8b0ed000-0x8b0eefff], got write-back 01:07:57 executing program 2: socketpair(0x14, 0x74, 0x0, &(0x7f0000000140)) 01:07:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0xffffffff, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:07:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpgid(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f0000000040)={r4, r5, 0x2}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) prctl$PR_SET_FP_MODE(0x2d, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f00000002c0)={0x0, [[0x3, 0x6, 0x9, 0x4, 0x2, 0x7fffffff, 0x9, 0x2], [0x4, 0x5, 0x7f, 0x5, 0x401, 0xfffffffc, 0x4, 0x7ff], [0x8, 0x8000, 0xa38, 0x44b, 0x2, 0x30, 0x101, 0x2]], [], [{0xffffff99, 0x80000001, 0x4}, {0x34, 0x8001, 0x22}, {0x200, 0x4fc, 0x6}, {0x2, 0x2, 0x8}, {0x2, 0x1, 0x4}, {0x3, 0x7fffffff, 0x1}, {0x2, 0x400, 0x7}, {0xfffffffe, 0x2, 0x6}, {0x101, 0x7fffffff, 0x9}, {0x4, 0xcf, 0x758}, {0xfe9f, 0x2}, {0x1f, 0xfffffffd, 0x1000}], [], 0x20}) ptrace$setregs(0xf, r6, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000280)={0x0}) 01:08:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="146e4d5c04000000c29e18a6d2a815", @ANYRES16=r4, @ANYBLOB="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"], 0x3}}, 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, r4, 0x0, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) close(r2) 01:08:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:08 executing program 2: socketpair(0x14, 0x75, 0x0, &(0x7f0000000140)) 01:08:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x10) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f00000002c0)=0x44) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) timer_create(0x4, &(0x7f0000000080)={0x0, 0x9, 0xb, @tid=r2}, &(0x7f0000000140)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000300)={{0x2, 0x8fbac4a7e6b7c9, 0xfd, 0x3, 0xff}, 0xfff, 0xa}) 01:08:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x2, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:08 executing program 2: socketpair(0x14, 0x76, 0x0, &(0x7f0000000140)) [ 485.636639][T15748] x86/PAT: syz-executor.5:15748 map pfn RAM range req uncached-minus for [mem 0x8dbc2000-0x8dbc3fff], got write-back 01:08:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) socketpair(0x0, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xb0, "b44d58a303dbd9900f11e9bd54148ee2e95acb0d5a79b23b3306d2413a5fa24ec0330ba258b13e2a01e4168e7d97c233854be6e3b665ee07f458bd8164763b6d3334fef2916354c750d53b96379bd3ce2eb9ae58de2dbe53620e60ff421274731d1bb20b69bcba7d8d329230e5cdf30c94fc4cf0b98d26ca3f56e9cc7cabd742fc10962b3892ed035955c39f5f68c59813dd8af2a1dd4fb262cc121d643b306646504c7d2c31803df09a914c10787d18"}, &(0x7f0000000040)=0xb8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x7fffffff, 0x10}, &(0x7f0000000200)=0xc) 01:08:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@remote}, &(0x7f0000000080)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000000c0)) close(r2) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(r7) 01:08:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x3, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:08 executing program 2: socketpair(0x14, 0x77, 0x0, &(0x7f0000000140)) 01:08:14 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(0x0, 0x0) 01:08:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev\x1dnvram\x00', 0x8000, 0x0) close(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r3, &(0x7f0000000080), 0x0) 01:08:14 executing program 2: socketpair(0x14, 0x78, 0x0, &(0x7f0000000140)) 01:08:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x4, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)={0x18}) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '$^md5sum\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080020}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x12d4, 0x1e, 0x100, 0x70bd27, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xf, 0x2b}, @in=@rand_addr=0xb36d, 0x100}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d5, 0x1e8}, 0x0, @in=@rand_addr=0xff, 0x0, 0x2, 0x4, 0x0, 0x4b55864b, 0x6, 0x7}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d2, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x8, 0xeeaa}]}, @migrate={0x1bc, 0x11, [{@in6=@mcast1, @in6=@loopback, 0x56927d085cd0974f, 0x2, 0x0, 0x3500, 0xa, 0x2}, {@in=@empty, @in=@rand_addr=0xffffffff, 0x32, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@local, @in6=@mcast2, 0x33, 0x4, 0x0, 0x3503, 0x2, 0xa}, {@in6=@mcast2, @in6=@rand_addr="810c1f326523df3208db4c0bc0868f39", 0x33, 0x0, 0x0, 0x3501, 0xa, 0x8}, {@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, @in=@rand_addr=0x100, 0x32, 0x3, 0x0, 0x3503, 0x2, 0x2}, {@in6=@local, @in=@local, 0xcd, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@empty, @in=@broadcast, 0x33, 0x2, 0x0, 0x3507, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@dev={0xfe, 0x80, [], 0x15}, 0x6c, 0x4, 0x0, 0x3504, 0x0, 0xbb223a14ef2fba5f}, {@in=@local, @in6=@empty, 0xff, 0x7, 0x0, 0x0, 0xa, 0x3}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x33, 0x0, 0x0, 0x3504, 0x2, 0x2}]}, @algo_auth={0x1048, 0x1, {{'tgr192-generic\x00'}, 0x8000, "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"}}, @policy_type={0xc, 0x10, {0x1}}]}, 0x12d4}, 0x1, 0x0, 0x0, 0x40000}, 0x20008041) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:14 executing program 2: socketpair(0x14, 0x79, 0x0, &(0x7f0000000140)) 01:08:14 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(0x0, 0x0) 01:08:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x5, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000000c0)={0x6, 0x0, 0x5}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0010000f213981b0459866e1f92eab3cc52308aa60d656ce7b0a5908813ff99639f571b79be55920105bc8d3d03f59782d32756d77b21bc883a44beb6e762c8a16a9e0c91c9dff3a154b42f70a26a58d3fa86a4b836759775239b336a77d100649770104d3bebc9", @ANYRES16=r4, @ANYRES32=r5], 0x3}, 0x1, 0x0, 0x0, 0x80c}, 0x4000010) 01:08:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x10000, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) munlockall() 01:08:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xa, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:24 executing program 2: socketpair(0x14, 0x7a, 0x0, &(0x7f0000000140)) 01:08:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(0x0, 0x0) 01:08:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:08:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xe, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:24 executing program 4: ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000140)={0x142, 0x6, &(0x7f00000002c0)="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"}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x8, 0x10, 0x14}) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="89", 0x1, r3) keyctl$unlink(0x9, r4, 0xfffffffffffffffd) keyctl$instantiate(0xc, r4, &(0x7f00000001c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'net/unix\x00', 0x20, 0x5, 0x20, [0x31]}, 0x34, 0xfffffffffffffff9) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:24 executing program 2: socketpair(0x14, 0x7b, 0x0, &(0x7f0000000140)) 01:08:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xf, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:24 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:08:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) close(r2) 01:08:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x22002, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x10000, 0x3a022a5002d60c75, 0x4, 0xe010062398c2a05f, {r2, r3/1000+10000}, {0x4, 0x0, 0x55, 0x10, 0x1, 0x0, "7fb2306c"}, 0x1ff, 0x1, @userptr=0x6, 0x4}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)={0xfffffffd}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x60, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:31 executing program 2: socketpair(0x14, 0x7c, 0x0, &(0x7f0000000140)) 01:08:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x10000, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$security_capability(r2, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x7, 0xfffffff9}]}, 0xc, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:08:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xf0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x1, 0x0) perf_event_open(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0xc049, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff74af, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair(0x0, 0x0, 0x6c, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)}], 0x1, &(0x7f0000000b40)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)=@hci, 0x80, 0x0}, 0x40) socket$kcm(0x29, 0xa, 0x0) socketpair(0x18, 0x0, 0x0, &(0x7f0000001740)) 01:08:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) unlink(&(0x7f0000000000)='./file0\x00') ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:31 executing program 2: socketpair(0x14, 0x7d, 0x0, &(0x7f0000000140)) 01:08:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x300, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r3, 0x0, 0x40}, 0x8, 0x8}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getgid() sendmsg$netlink(r1, &(0x7f0000001700)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x40040008}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000080)={0x268, 0x18, 0x400, 0x70bd25, 0x80000001, "", [@typed={0x8, 0x4b, @fd}, @generic="22bd11a3be1c530d7bf52927ba13071e98c38d0bcd8cf9260cbe6db1ba19", @generic="f69c8b9e9ad764c2d74831e4273576894d54648ea14d14160b90d38c5396dfc1def924c3eadf528dfdb4a807b232cff830db35f05c2ded027a5912c7b2c8038c07ba33e701579c71aa250c03c00e00dd1ba9a16e65a3dd80e54d68a81c9a8b6fdaaa7e4c94d1d0c1290551013bdfff72d33a97e7499431", @typed={0x8, 0x88, @uid=r3}, @typed={0x14, 0xe, @ipv6=@mcast1}, @nested={0xb4, 0x23, [@generic="1b12de97ed00b9b87b376b3cddfe713853b34061ea13eaa4d0088442624364eb4aff70664741bf3bdc5b4ba66e1953557bc45e659af1cd30a83963d353d78d91d7dcc06c25f235029f3d550539b5a834f0942a84c0283ac9fbe327985302acbcbd8021632ce0bcd8cfb054ce5bdc2db13ea3bb760998b98d4ad0930e20515ce2e66294c184e42f3f406ad3c84dfd0c337bcf77af2d53b84ca4207ae26ad872fd092dd26ad9acdd3554e9f9a87d7f8280"]}, @generic="12c5c6a1f9df3590a576468f69029f1d82d216047465938e8bdc00c1455b6d0ba8342d5b35102e293f4e98ba7399495445e25738ff6625627405a30361aa7b5907836e41eb16aac50f0dc1ace18377694444aa4b31df4baab579e2ec45cc95bec23f193f034fdb247fab78de5a02a383e845ee72f2ccf20b86c41d2185493ef7821d3e928fbe1096df85745bccb99fd34de012f778d0d2f363dbd0b2cc17bf488818fd6d9846883783e87b2595d3c458142f16c25a1dee954c79f030bb980cb8125c3b7f42289d9c205809ab2178aa4c995a39420cc8056a1281628febfb2f0ae8a4c0781e60c44f04"]}, 0x268}, {&(0x7f0000000300)={0x1c, 0x14, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@typed={0xc, 0x54, @u64=0x80000001}]}, 0x1c}, {&(0x7f0000000340)={0x1338, 0x1f, 0x0, 0x70bd26, 0x25dfdbfc, "", [@nested={0x10c, 0x2e, [@generic="78acdf29f69004c85db2e14ba0871f75058d9034e4a4a21922eb2a7558ecf386cd29662c9b9712ce60882038e1bf301382541410e5806d8896f4c39089e7ac3d71901481ec62a8406b1d815710c6fac1aca15e6381cedef6573689d2b5e8d0b1c5158259b478481425432819ba9262a131f78fdedc7abb0973ff541b775c9d73440b3aac5e26e6d70fe68a2869ea452bd8beea0ef467c8bb9c2fdad9c3185bb5c988b94d7c4ecf176ba1a211b2c81ecff36ed592903c356c077d21e3a582fb814198280b818ec46db708fadafebd0c4ef786453fe0ffcb1fc3864f337eef436397350f9e750fcb3b483fd188d3818715467b2f92ca79", @typed={0x8, 0x16, @ipv4=@local}, @typed={0x8, 0x5f, @fd=r4}]}, @typed={0x14, 0x93, @ipv6=@mcast1}, @nested={0x1060, 0x1d, [@generic="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", @generic="2081d49af4525ba3ea76724ad18ed85cfded9988e713cb44586795e4736de45e2ee55e9ddc235aeaa5bce64b4f3f7178008e06aa5a02900c5ddec4de5b3df47124a40ef716281dc8bd466bf40f802404549e190364c3286af234"]}, @typed={0x8, 0x24, @fd=r5}, @generic="977ec5f4674c54e2f7de74b8b68a1a28d56f878434f613b7d771ec64c30151cd6eac30d55af3cbef01b93350ab76f6c4177dbf792574d7c1ad4e20cdc0a11b873d8dddfde1201b80662afcd5e8baa915eedf7d6c9354d994c7839d387ea40edc25880977ac378b81c336cabebdd968eee8c9ac49e792c3e8e7e485cbf3f4e21226cc0e78", @generic="3e662ca8235efe0ccb6cddab01b7a80ab4ced3fdd2bdc6f9a1d62657886310886e4ee69b7a47b16944274b7fde6d00fc472bc49ec500c15d2a48add7108386623fc37b8795a8bdc189c73f", @generic="e92896ff8228f284c164f68cb96adb7c2abac9bcec23fc4589f506910ab9a402c7b483fe23aca440fbadeb4f4742b60f1d836333608d0e0a989e6f8af3f5ac49df4eb9ed7468d6a74bc441127bbe06d2e87df0fcade7979ba56ed4d3d10e9b55ecd97da9cbf38ab8973ef0baa41280414a787d5934fa4622ab4409f27dfe952f02c6a7f557e270abf2c88ca6ab786b2eb461bd0d4b4c90ef8390a2ab62655456a9642273f37685d288eb194eb2b57fbeeb99d9b001ef80efef2b9f0b03c0f3500d2e7b868344f795d590b3c9e712"]}, 0x1338}], 0x3, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r7}}}], 0x38, 0x20008064}, 0x20000004) r8 = syz_open_dev$audion(&(0x7f0000001740)='/dev/audio#\x00', 0x8, 0xa6041) ioctl$KVM_S390_VCPU_FAULT(r8, 0x4008ae52, &(0x7f0000001780)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r9) 01:08:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) socket$isdn_base(0x22, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="89", 0x1, r2) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r3, 0x1000, 0xb5}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'nhpoly1305\x00'}}, &(0x7f00000002c0)="bae7e5d71f928d70ac46d85afcc730f8266dcfcc52f7d39fcdf84847ad94ba1307e6d082392e407911bc95126f3a0405fc1a9c0bdab6a0778e392f70fadf8ab336e328e30e122431836f332beb2f17e8b5da901ffef6f641834306167f894ffcf7a8d6bb52a202f8f66e091d1e98aadf6d1486c46f623d018197f5a0a847f4aea01362d3ce973eee425feb8ec668783e11ddbd19f73ad99ba5414af23d21cd17bbf7decc2abfe145fa8def63307ebd31958b0e7d936cd9b15809438d7a6078d0523a9be1b4019d11d73ed22a869817de69f6421696817be939d37a7ab49baf231a670c3c4e83b6f2439f809b175a981866a95ba8b626bb82cdf3a6dccce383f327b46e35aa2b1c42643639fb07c45ad23b6e89ba4077704f43fe40a33b736135f36e4ff2e7c589801d7b4c94f96c2bacf80ac1eb319903a4f8463a3982b9bbfc6b2e0b481752c36f9bf24fdb2d1cd7556660a0e039270dd47d00986ac8039b777db4de917a3bf942b7b4384711caac14f20b203c39c64ffa45994dde686cbb5fb1de3c2d7f4e2cdf4d687fa5cc96bd5c6f7893b0506d2198fa7c54b8ecae36c747b2e75c5cfac4b43a8534e68e276b94016725e98721301f28d34ff44572037f7a9ec93fc0eec660191d2212f311fe87ce3f0b97e9ec1deb9730a43307f4ac4db4df069ea97c0d55d6d0df1b1da6fd309e8a124043a15c2b8f14457b27f9e1a898ad5d1351986ff12781ebebd1989c2230bbfbf2d5c4c39e7f75a2697b571284aa2a1b8f40dd40ec6c50ef3362e3769aec6afa3132ec970dacd2753add1b358c7c04e4b1f0ed4995f523f78c5d5f4c9231bb184f2edd32535e3aa2012030a5923d4b37bf73c798ba1a565a9432f9fcc1e54c8130894edac63b00fbe6dbccdeb4fac38e5a6a794061b6dbacbd186c71b7794ee916e41fc6bb197dd97a845649f340975ca1c2759ea5072ea83fe70396eca1d7d1e552523c47f7419cb370de24633cd823778b8a19278d32f16e8cf0527194016338a2feef48f80ebeca5ae7bf9e9a3012d92e28db604a82be6b9b7f33be2a72f9fdd98318b39621c21d3ceabdb8277c563d0025e757b87e7876f9e42a7633a72bf1802b49c8fb6a0f664c4968ef5dcc9daff472d59bdd52a0290293367c7aec41b211bbc679bfe6cba3ce12079102f8a749b5e8dedaad2d6e8d9576349c35d7ac9ad7ac6f17899c00c370e15274479ff1c37a4b1f968a9735aac67b02e000c6057736e316dbb85afa9507932ef02f343e69f512cef8428794f4520779d6bfbcaebff46e1d39a7f1152e77d468dde685960069a78f61ad685907975bacaf54e07896c9cf491ba59f997042837b14a07f694c204b95f3fc2f88ad7e1cf3176f5d155c3edb845fc1db1159db474f044fd12fe287cfdd3db178b48a6118442e172de0634650c0d6dc9e3aaa19d2467a7012ce55f89d375338ca075144a87fbf204d66de5f30440f2b0872bde8fd64a515fce7ebdf478c62e61d7d02774ad1362e6963869c125e6dcb8285a71daee0ea5c808beb2e1f109d4a9e02e849cc42a51b1439ebea12146eeef2a89586761ecd4993ebfe33479e96997488d25b0d0483304292c6873dea9f0c2d01b102d9ffad0b1c56465477cf832ca88e5d797e2e1a5a2a6671558c207bcbb7c272108893f5daa36d9fad3d03135d9f7d728dc3679a98fed4c5dd9bfbed9b506a7a373cede9fb8ba0eb5d618a64720034cb6a3f44606022b0f29bfb12d1f3f71664795cd1eedafdb87fd57e3c3b3b6d982ac64cffc95238e713024d8af7ba8af339e1ab0c84c674cfa3d8e4f6c80585de22aeb0bee85242f721a834e52f94d47e7730690bbc9843c4f1697858d1421c77ffad3b6ef8a6783589e9cf8f8471a5e8d8ea37e96b67404292ae7872a8f08aed2127516d0b5d557e646e47d2a7be0dbb3ed30784692272523a10d269cdec6769a179b0ed517474846c297c109901a8dbd41cc4fc614fcdf187385dd8c8f2ad56034439557a994dce67021bf08e69f74b5c6f810f301301731b5a3467cea8394457e84424c9cd873e454b1d558daf5d62ee54e037ae3a89c14f10fd328585d1fb30f53a1deeb00103d7ce743c42be6c963b5f982f74959f8ba60569f4545888ec686bf23390aa89bdadedf3b7e42d509c0ffe2e29e64ee83951bb91af385f13928a948d5a60653e0b987322009b689ef621a52ac45e68bb8f186d3e28e15f1d82fc9423807a19ad9f03cdedd819ac53755247fc3fbdc9d65abd59c70c41fc252f4af02f65009948a489e36f4e4f472b3507f36ecbdd1d2bab7701a69b0b71c65e00e652c6a4b68851b16b54e194d55f24529ede55024d5b6063b3b5dff6b77eab521eedfb2acab3538e9997cba44a785574b22523b2fb2538fd8613b93a2d6be09528b1262b454dec5e2d6ea256c050cecace07126d5cb885718ce9b3ee02372fbefb586467f0cc4f498dfb9d3fb28682fe0af5e7290b0747584e9ef768ea4cc90fba8eb3899ffb10e03325e4bf0c1bfafcf0ffe80d3318286aeaf1061483aac32ad365c9c2e423ae16edb67f4a89c98dc9c7827756ec052969f9fd86739c9c6a6060ea8a258018ad2a147f0f1cd97581fb5966125a78d22d75810a291387457d3b9f46c592f6b1ea5d0ae3bec6cbef5f11f5fcb32c7569eb7c6ed93853d4254de4b8b1561e20154c53ace7d62fe0f03e8f69f20e5fe87b7aba2ac32624b04d5fd28d0dd7fc7a83e54a32433a509ba05696890759626b0d4502060c3fbb2e37997cc51f3180077a89a74459ba7748e9aab49cad1a489d9787fd30973b8fbd2af2487bbb5886e2e025afed9c83b596dd0b4b82f7bab335e25488a766c38fed098ac7375f6f8177d96e49733f2d616036a93991cabec78b12166b159af38df95073e34114c8b595715d7387407fb571e699170b0b13034ca672bf141f3c051b84fa8204e5712857efdcf8dd354045e032d8caf98f5f1fc50bbfb29408d468a4c5ddedee8cf6bce3357f1b6939ee566423557c6ac92c147b3003a5efba1c1eda5e7af39f505c186a80025e9f6f75a1f2ca47f30e7c10bfd9af2eb991d5c9354d62edd3b3ea6c280c877e47a802dcd377269fa6cfcdcba1d3d5403e123f853776cbea47c5ef08f2aa10972872555b87e6633f8dea91fd4facb2f28b4ee0642b3ea6ea91076352d1d1ef49f351122b11efe27c9126d0bea6e24344d865cc933b3342302a387d2285668970ed1f730a0d08427d3ded5b126ba6afd6f55c2d7a5acc40ccd2eab7f50414787044d9b8f1b4ddc81b41ea5382256e1be3ea5d3b2e81eca1a4946f6f7204d09cf0ffbab15fef8c9e830477eb0f7c2f9f472a96d59e2b91aa419358ad19fe1bd6ecf2d879c8e0839fc2ceecd69a2ad50ba06a0d6f4d7201284e28e2338b11382946f05b6f04a5e86727417616a6481d93e9fb5c25e3113e5d2ba7dd98a291d886d94239a0f1a2aace5e4639c544e4fa39fd0051d1166318f5623eed955fc253bd334b22d1055126d5dde043791b7d5c968c0502aba830ad3447f73e41af1d65f9069f72240f451c7d36548316c23a4d4ba973b67736dc5f4eb5099efecd392ac88d771c9f1d2fdc8ad9ba3191e08e92ac8b77f95f2e3845a1bf435c1edb1ae530571b4e16a4c24476f569800500929c9c75a1db1548aedecf1096fd43da650693cad087e1f0c55ff8ec278b2a23a8e6242498667e414cf81665ba64e76d86569ee9bb69c436fe613be3d25d1774a4103241028ccc06c231f78304e2b58c2f9c327f28aa8c25bf599a3f5a33f636d7b8aae85b0f9774202ae3ea2c26e83ffe38fa8cc7319c6ac343172725373cb8679d97396e4b0e09956888bb4cd33082281a7a55663940287a876e72cc071aa9daf2566222053eefdfafa0c97c30a09185fe5ef52c75784c9afbf42756744f0088cd93b398743b595ca70950ea3ef03ecfc2cc925176934bae03fef584d7699fa00e6a069fb6a1d694fac7d19ea93a848b9e29d5fecc55e6159c842eaad55a6e88cdd8bba5fbb242e3692e08fccdd2d6d281e58fc7b3072737915b603767bbeabca84a6c309d1a1d24078f2225a4aeaf8a315612440b708c498e76535315775214352c9345e8e31e023f2e0dcd8a521b881d81761abb7e81e38a4c396e5865dafa4a7f1ddd64d80e1260fe2fafc9a6fa0673a9aaa30d6f8700beade8621836656f9d8024229cd0c7fc6d85aa7fd2503bd43d8a8912e713ee8c352b56a8236d5b5734bbe462d587b32aa3d5965400932ce1043946be920ae4d847d7e24093d6e8af19e75a515258898af8269b05ee16e0d80fa7d6ec3965de032b054f8aaf83d43909bfcce4238cf663a4653de219362bf25d42b62971bcf3fd6ad7a71517c4b8e1212b2fd7a97485934ae47c6deb8478d381d3772ec90bf85e609f828b128f0c231d2b59453fe9e486864665ff3534f4148435c289cfbb4af9afe04954b7853d4136bdce0ca33aa9d1eb4dbab071f19138448c48e15c8da6637934978dd28be5b82492225230032c60b39ae236b132cae08d1550a5bf549e6d0a4d25bbd9ec4ee02b984210214ebb7f1724674c4985bcbb0d863b8ee6d2ce29385058079746f44c067e8c16deedd61f84b830385daf9cf78ab4e38eeefb460cc4e22fca4a376be58cec945656062a0ebc31030929d2d421a9a5ae8cedbc1bcda11f4bd241a77e7e70491521fa42fb478be75223ba31abefb35e2506244c077ed2163245fcc3111e48c064bc67619ba29e3454d7b5a94ab63f1657a44ff60f8088723af0bcec0d4567356ceb6a22689f68b089c07b515fcff0af7ccfd88a98e7857bca3c68d5d4037e8bd5792aa64f44c0817ff38e3c10db6b0bbb9a618a4f45561af78f0ae0795e10003244949f710f9181306460a95d679eb35ad65a573bbebb13d249f29bef722bf945edc0dc79a6fd2d72ca6988767f373ddc4d81ad984af66a777dc39c9af2e8a0cc247205d50d57451ee25ab3cf12cd7d99489460d0606bbd26889e37a9e777a8914767fd0da70af392f970443edf8e3790a1c5dd07e9bba4931b3f8e4172a1cec84b5cb4b989524c9f1d237d7bbb08f95bfc35e9cf3072e18f75901589dfaa97c0fb8dd776aa54686b33d929a515578e7ef6c64b39e3798074e7ae9e58649e9967a9fcd98008a7247729069dc51ced3d21a550482694a5b83b3943508a688ebc94a05ccfed3c4dc35de47394c7324535b447351da4b91c679697b8471d32079be3650fe71e9a29d288e31383b4fb32872efb4f8cfed1ae140d42f46dcd7a92f7f999bf3fdec1042113077de7af74a8ed8215a80ad529874781294fa6caad3d054980872a7f8398b01be96e55d4de7f308229b218684e41efd3f06e3f6bf3a5f0d0c94bc1c084fa4ef4d8bb681736fdc74d509c056a18f430ae6ce6bf256977d048b1f0815d1e0d23f0dda1fb494ff9dd5daf1d2adef1d9ab53366418c9823a950f3aea0b0953e9a31aed252d0d13938d26aff6d3e43b8d8332b56a440e3202ebe4d4fdf159f5147c8a9db983bf020a4d26546618a62227f3f6b9d0851b3565025f1ce74c90b17bf7dbf56bef3f3ec7b4c2b8ec634dc05280085aa784b210f2aaf11ca8d1c042ee703f4c4003fd5c485f3f335b1f68a60c63c345d020c81c309e72981db82c668238d58894543cbd2a0fc7d2235827643ccf5d7cdd52ea2eff7e66adbcf84f96aa063a1065608236b8f99faa0bd76fd59e903f26c9e8b3e5deb17416c82328fad07153349acba709a7ffc72a21877f7c98cd98e674aadb43", &(0x7f00000012c0)="0d2d16ab684567fa18f55d3f5ca6541ec95f88cb538985a0b4793bed31efc501cfb5f2383537f88daee9332a97ffd4dda39aba6b75110f2bb824ce1584bb25d58eac047bef2e1f7da3faa8239d69928daab204db1599a897c92cfbf560d0d398820920a1f96ec7111a364c40242ec1ff9506b77c03930b6d6b0bf4cfe9d688af5090620da128beb3e2834d99099f71a1b867e1b439c36257edea98679cf6b0083c0cdc270fcb838dc9e2953db55a5243c3e1434cd1") r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000240)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x41) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 01:08:31 executing program 2: socketpair(0x14, 0x7e, 0x0, &(0x7f0000000140)) 01:08:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x500, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x6) 01:08:40 executing program 2: socketpair(0x14, 0x82, 0x0, &(0x7f0000000140)) 01:08:40 executing program 5: clone(0x42102001ff0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 01:08:40 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x6) ioctl$TCSETX(r1, 0x5433, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x240000, 0x970d}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b40)=ANY=[@ANYBLOB="010800002fe0a7dfbb02e970a87f1520f3bc38a20b3d8b03cb370b0a8fd2daf474b893567850b5a5297ab0fbc4301aa9db915c045a2c51044b632e3710e5c9c3f422a19677ba8834485d3af4ff2a1eaa619428e65f3f7c453d0917954411ac30b3c805536e195aecd268e22b330d1cb749aab383f83107b4552e084b23fc04bb36bf64c9ac2c917ddf08", @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000100001006e657464657673696d000000100002006e657464657673696d30000008000300f0000000"], 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7947427166e21df2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fedbdf2506000000080001007063690014000200303030303a30303a31302e300000000008000300020000000800040003000000100001006e657464657673696d000000100002006e657464657673696d30000008000300030000000800040001000000100001006e657464657673696d000000100002006e657464657673696d30000008000300f30000000800040002000000080001007063690014000200303030303a30303a31302e300000000008000300020000000800040003000000100001006e657464657673696d000000100002006e657464657673696d30000008000300020000000800040002000000"], 0xfc}}, 0x8040) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) rt_tgsigqueueinfo(r0, r0, 0x40, &(0x7f00000000c0)={0x1f, 0xfffffffe}) prctl$PR_SET_DUMPABLE(0x4, 0x4) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r6 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x400) pause() ioctl$FBIOGET_CON2FBMAP(r6, 0x460f, &(0x7f0000000080)={0x28, 0x1}) 01:08:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x7, 0x3]) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="0bfee5b84bef557e94429c7df7f230e0a91aabe45321dd1f6f9745765320f7fe712c986c2d0b96d9a4993e0f01005cd8a58c718fc9cbb298917a67c47f3bd67dc26e6aacae877c2a52dbff465e627f30c7e3c7db462b1b89835f0f207c4f941a7ca306673a65a1de9bb0c4669f3406c4ca4d9ea6ddf51b6dd048a252a2c83dec191c1075758717593b313b45c787730579a0d709e5fa1fbdb2dbdc3d", 0x9c, r2) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:08:40 executing program 2: socketpair(0x14, 0x83, 0x0, &(0x7f0000000140)) 01:08:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xa00, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:40 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x8b90cbe5c782bad6, 0x0) ioctl$VT_RELDISP(r1, 0x5605) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@dev, @empty, @local}, &(0x7f00000000c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) dup2(r2, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x1000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000340)={r6, 0x5}, 0x8) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffe69) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) mkdirat(r8, &(0x7f00000001c0)='./file0\x00', 0x2) close(r7) 01:08:40 executing program 2: socketpair(0x14, 0x84, 0x0, &(0x7f0000000140)) 01:08:40 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @multicast2, 0x4e23, 0x2, 'sed\x00', 0x5, 0x9, 0x4e}, {@remote, 0x4e22, 0x30004, 0x4, 0xc9, 0xffffffff}}, 0x44) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) 01:08:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x10, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xe00, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:47 executing program 2: socketpair(0x14, 0x85, 0x0, &(0x7f0000000140)) 01:08:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002540)='/dev/null\x00', 0x4200, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80000) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000002580)=@ccm_128={{0x7}, "e594b9195347350a", "878f51ab32086f7a52ad2a6fc594bd01", "383adec2", "46954efe2c7a6a7e"}, 0x28) 01:08:47 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f00000000c0)={0x2, 0x0, 0xfffffffd}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:47 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 01:08:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xf00, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:47 executing program 2: socketpair(0x14, 0x86, 0x0, &(0x7f0000000140)) 01:08:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:08:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x3f00, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:47 executing program 2: socketpair(0x14, 0x87, 0x0, &(0x7f0000000140)) 01:08:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x4000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x10, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:08:54 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 01:08:54 executing program 2: socketpair(0x14, 0x88, 0x0, &(0x7f0000000140)) 01:08:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x6000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0xffff, @local, 0x8001}}, 0x44, 0x2}, 0x90) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r6) 01:08:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = getpgid(0x0) ptrace$setregs(0xd, r1, 0xd05, &(0x7f00000004c0)="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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:55 executing program 2: socketpair(0x14, 0x89, 0x0, &(0x7f0000000140)) 01:08:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x301, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:08:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x7f00, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:08:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x1) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x20, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000040)={0x6, 0x1b48, 0x3, @local, 'hwsim0\x00'}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:08:55 executing program 2: socketpair(0x14, 0x8a, 0x0, &(0x7f0000000140)) 01:08:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xf000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x10, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:09:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x6) close(r2) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x3) 01:09:03 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x196) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, @in6={{0xa, 0x4e22, 0x9, @local, 0x2}}, [0xbe, 0x1ff, 0x4, 0x3, 0x8, 0x101, 0x4, 0x9, 0x2, 0x1, 0x8, 0xd1, 0x1, 0xf7, 0x10000]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0xaa1}, 0xc) ptrace(0x10, r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x140, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)={r3, 0x8, 0xf0, "ad26834a6f0c453497a459e34659fa515d3c2552b9ddc01f85dcc429ea9736435e3948a016aef6ce6322529bf55b25ca89126b6590c2fa35f9eab56788fde73b1eadf7e317d60aa6a920d5da5e2475b516f27cd733fd0bf12632c463d834cff59f4e95cfee82a4283d1e31cc662a7b54a0f9feb591e26c8d6f637f146a2b737a1926230112c21f9402aac2c197113ba8f0c5ccbfd9e744407c13a55d52bb7bbadd00b34f4ed0a492e8e913598958af894d2617b830880263ff25157a752193729f7e680f92e3bfa0ae8f37902c0ce963f99a8165962c9f58d8f3d53982437e7df1cab5f00d77f4af5595be53c6bfbca3"}, 0xf8) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) getpeername(r5, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x80) setsockopt$inet6_mreq(r2, 0x29, 0x7, &(0x7f0000000400)={@rand_addr="f50fecb5a8b7e06de5d5e5303643d467", r6}, 0x14) 01:09:09 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x196) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}, 0x4000) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000d00)={0x0, @capture={0x1800, 0x3, {0x5, 0x1}, 0xffff, 0x6b93dba}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x180000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000080)={0x10001, 0x8001, 0xfffff0c1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600), 0x0, 0x20040010}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="d878df9d201cd6024091e56704533e9864300dda44bb4012257b9cf695a6ee30", 0x20}, {&(0x7f0000000680)="bef6e9754435346c26d1aa13c3f7640cd4ab2224d138bbba348c3a68ac723529a4786d74f4fb5cd333b8c4e233dd43bfe9854688c5d8a44d9c50", 0x3a}, {&(0x7f0000000fc0)="5be6cc58cff0c6189ce66df0acfd49635df2fd4c6e6db09a01234e318da646718d185df4c110fba26b75ef45782b7ea723f13dba53766683424d12b1765c1384374fca7c7fc6435354adb52b9996f0b00ba657daf77c8900145bb1f2174d735e7aea075f6e695abbdfd1b757c3445979e947d1cda0656e43a64735f2e2d7dd7e8359793c357b049061a1d85e7947b5c5a7806a9d3b09f3d0c78454f798a16e521c744420bc8d6e0173aa7cbcd673db1bffb1655c0a1db30fabe8e582a50e6ed8c6552d1f51245247ae8ab235f9ef1e10630278032fec3217c7d8e65a93adf32893", 0xe1}, {&(0x7f0000000f40)="c41717e4c38d928978afa6c7f591a4538fed6788d164c5135ee4a4fd7a00217f818ee66ade40138089132a8e9f5c23ccad0000000000000063401e6c643e3336997ac5739d8b0c9c99c7486b2ab49d94f98cc1f7e129be70d4bb7c84030baab515d34cabb02c7662f8c2b1a5d9b297", 0x6f}, {&(0x7f0000000800)="792b97cb163d4719363e3e735f6f773cef7ddca672062b2b656b263cfd48189a3311f5e3fbab8edbfe57191f9c1f8251326a858a160b7a29e6a78e8126a463face7aff079af2d42c061b895a3c4692093787d7c910d79ca0bfd74391ae242ce044ef279ca602dd4360c56bdf34bc536726f1df9ca075734b4524ac51cdd8ce937a4fc3c1ba2e2f76bb9b7597b21087f7985c3ae2aff2d09b01ab1bcb8808105471fe7fa72f7dd535860d8568aac4f24e6d245c7098feeb91d454dcab92e72c", 0xbf}], 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x338, 0x4000000}], 0x2, 0x10000000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x200280, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) 01:09:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000580)=r2, 0x12) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa4ee027d8334c53c, 0x2812, r3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ad, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r8}, 0x0) r9 = getpgid(0x0) r10 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r11 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r12 = dup2(r11, r10) ppoll(&(0x7f0000000200)=[{r12}], 0x1, &(0x7f0000000280), 0x0, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x5452, &(0x7f0000000040)) fcntl$getownex(r14, 0x10, &(0x7f0000000580)={0x0, 0x0}) r16 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r17, &(0x7f0000000140)=ANY=[], 0xfef0) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000440)={'team0\x00'}) r19 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r19, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(r19, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/131, 0x3e1}], 0x6, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="700000001100000229bd7000ffdbdf2500955f00", @ANYRES32=r20, @ANYBLOB="000400000402040008001300", @ANYRES32=r21, @ANYBLOB="08002c005f00000008001f00040000000c000100aaaaaaaaaaaa00002c0012000c00010062726964676500001c00020008000900bc080000080016001f0000000800020008000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r16, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=r18, @ANYRESHEX=r7, @ANYRESDEC=r17], 0x8, 0x1) r22 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r22, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r22, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r23 = gettid() waitid(0x83b895581628fca4, r23, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r22, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r23]], 0xfffffffffffffe56}}, 0x20004850) r24 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r25 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r26 = dup2(r25, r24) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r26, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r27 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r27) r28 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r28, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r28, 0x227d, &(0x7f0000000780)) kcmp(r27, r23, 0x0, 0xffffffffffffffff, r28) ptrace$setopts(0x4206, r27, 0x0, 0x0) r29 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r27, r29, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r23, r26, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r30}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r30}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r30}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r30}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r15, r16, 0x0, 0x1, &(0x7f0000000080)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r13, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r30}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r30}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r9, r12, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r30}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r30}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r6, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r4, 0x0, 0x15, &(0x7f0000000000)='trusted@lo-{security\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r2, r3, 0x0, 0xd, &(0x7f00000007c0)='keyring^-proc', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)='eth0GPL)@security\x00', r30}, 0x30) wait4(r31, 0x0, 0x1000000, 0x0) r32 = getpid() rt_tgsigqueueinfo(0xffffffffffffffff, r32, 0x40, &(0x7f00000000c0)={0xfffffffb, 0x3ff, 0x2}) ptrace(0x10, r32) ptrace$setregs(0xf, r32, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r32, 0x2, &(0x7f0000000280)={0x0}) 01:09:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xa000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:19 executing program 2: socketpair(0x14, 0x92, 0x0, &(0x7f0000000140)) [ 556.791033][T18227] bridge0: port 3(gretap0) entered blocking state [ 556.798402][T18125] IPVS: ftp: loaded support on port[0] = 21 [ 556.815444][T18227] bridge0: port 3(gretap0) entered disabled state [ 556.860562][T18227] device gretap0 entered promiscuous mode [ 556.895933][T18227] bridge0: port 3(gretap0) entered blocking state [ 556.903078][T18227] bridge0: port 3(gretap0) entered forwarding state 01:09:20 executing program 5: [ 557.787361][ T227] tipc: TX() has been purged, node left! 01:09:26 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:09:26 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) close(r0) fgetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73656375726901c3d38d3574792e2f6465762f6e"], &(0x7f0000000080)=""/135, 0xffffffffffffff14) 01:09:26 executing program 2: socketpair(0x14, 0x93, 0x0, &(0x7f0000000140)) 01:09:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xe000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)={0x0, 0x3}) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="89", 0x1, r1) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r5, 0xffffffffffffffff}}) keyctl$chown(0x4, r2, r4, r5) ptrace(0x10, r0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000040)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:09:26 executing program 5: 01:09:26 executing program 5: 01:09:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=@hopopts={0x2b, 0x17, [], [@pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x2, [0x9, 0x0, 0x7, 0x100000001, 0x6]}}, @ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xd}}, @pad1, @calipso={0x7, 0x50, {0x9, 0x12, 0xff, 0x0, [0x1f, 0xd2, 0x4, 0x4, 0xf0, 0xffff, 0xffffffff, 0xd, 0x3]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1a}}, @jumbo]}, 0xc0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x81, 0x4, 0xca, 0x10}, &(0x7f0000000000)=0x98) close(r3) 01:09:26 executing program 2: socketpair(0x14, 0x94, 0x0, &(0x7f0000000140)) 01:09:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xf000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:26 executing program 5: 01:09:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x3f000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:09:33 executing program 5: 01:09:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x1f\xff\xfe\x00', 0x218a00, 0x0) close(r2) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0x32) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 01:09:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x80000001) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:09:33 executing program 2: socketpair(0x14, 0x95, 0x0, &(0x7f0000000140)) 01:09:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x40000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:33 executing program 5: 01:09:33 executing program 2: socketpair(0x14, 0x96, 0x0, &(0x7f0000000140)) 01:09:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x60000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8000, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x20, 0x0, 0x1}}, 0x14) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) splice(r3, &(0x7f0000000100)=0x20000000000, r4, &(0x7f0000000140)=0xe77, 0xafb, 0x15) 01:09:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x644, 0x1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:09:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) close(r1) socket(0x100000000011, 0x2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) 01:09:37 executing program 2: socketpair(0x14, 0x97, 0x0, &(0x7f0000000140)) 01:09:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x7f000000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000140)=r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x800) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000200)={0x0, 0x4, 0x81, [], &(0x7f00000001c0)=0x40}) 01:09:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000640)) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:09:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000226000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x10000) 01:09:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x2000007, 0x8012, r0, 0x0) 01:09:37 executing program 2: socketpair(0x14, 0x98, 0x0, &(0x7f0000000140)) [ 574.997981][T18936] mmap: syz-executor.5 (18936) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 01:09:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x9effffff, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7, 0x8001) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:09:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0xce) 01:09:37 executing program 2: socketpair(0x14, 0x99, 0x0, &(0x7f0000000140)) 01:09:37 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b705000000000000720a23fe000000008500000012000000b70000000000000095000000000000004e625894684e890d31ae451306373a0a5447a801b8c1fe0209c4f0c4bf97e6555e61345400f9bd42abeb9adeb279f797013ea9c1a21902ff07000094a2b51c2db1fd21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca23b944480bebbe8282f07a95d767437a397bf8f50e80bf946e7dfd876bffc402887781979461c433e8dd0245c79435883df6c10ce86ff860971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bbae4f7a39d1da098ef78dffcff5e1ed19913a5fb25c79dac2e489f681278926581f9e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517e92c26f826c8a3bfb02d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6a18438e2357a9c1e0609b2bec5003d6ba04a978f41e8ed4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb822e202222c03fa84ccc3cfe7171094018630366397266090212343aedfbf7afe89c2eb775b0d828e3da2229958db05de7db5abeee3b64ed00c7635738015a43ecac66d80810da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa4602c54401a76406f0718d4efd10afa938af530421d32093082b7aa71304e0d2d9cc310d1b676b378a5879e47941de1a28c3a8f4be28628bd443537d0e032b7d2badd0bc6617a859b7ac272b634135ecea6f43291829030f06e20c10daf6a275daf5db2dac70b0fedb05e68d56401d1e73ce6b144503d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e88071aaf79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249674b08f7b7f72bd7dbc96aef53be267d79fd782027318cd7632e44d2faa16209272b39b5ec8d239832ea547571fbc8de747faab724bebb6401412b496e07119759fc5a9c441a8fcb6c78ab447e87e6a1f6dadb86fcdd4aa1d610567e14d739b20ff3ce04d0d2e548128207de07a83759ec30cf9e0a3f53f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca476cfc4ab377d2d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf87cefce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad4f6501d377bb3482b4a36cd02dacb78d72d776330713045eed7d4c292f4f8be997c826c4eb950f3d400"/1143], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xce00, 0xe, 0x0, &(0x7f0000000080)="0000f00000000000000000001000", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='b', 0x0}, 0x40) 01:09:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xf0ffffff, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f00000006c0)={0x8, "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", 0x1000}, 0x1006) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="89", 0x1, r2) r3 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'s\xcaz', 0x1}, &(0x7f0000000600)="bc0755f762f7ddd7b87785d1c61e8be52bc57d1c9cd7e746b04cb86d32d9ff88c43e8f62725a667ada6c3f9777529f1de0cd20ae573d73c63a3269fa38a1da3cd8f7b311ede7e00edf970dee71d11a79b086a68fce598eaf7d443ce5af3fe8540000000000000025dc3effa3660bd37a978d3b589341683edab9b2602024081721b30b8938c0f62e6442e848e7b127a8cce3674420120da253e02b63502bf0cd6468db027fd682933af2be10d74d", 0xffffffa0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000500)=[{&(0x7f0000000080)="1477a8469455ee99ef9576cd2e0a07743e8f9fdb128a9bd5017958f2c5757f93fa169dd3de3426709faa7e2d375267be3357f7575447b9cd36521c8015a803483885f0a7df851472189a66adf56df0d22cdbbf5b892fa719a3fb0d96ad4472c4b001d1d52cc97bd7c8adb1559797767d80a66363", 0x74}, {}, {&(0x7f0000000100)="c548a3ff999968b4ca6d1c6f5773273bfc5b3b3fc45f351731168518a7fb9cbf60e72e9763be64a1c368ba0a91c805048766f65761a45d0cbd188a2e21aaf29d9366bc78de86bb16c8537ed716d53363787bc1374fd76e331e01b6f244f6234d3dd5d377dfdbefa735586a4eb43ec46c844f09e9977a1e32c3a92c309f21ab90a1f239a9e7d008098e39c8cdee1d5ea531765a56ed5cab9a90bda21642890222f8f8019720f63f83c472051f4a84398e99de9d3eaf7ae793795293ad5d8bdd325e", 0xc1}, {&(0x7f0000000200)="6e6deb2dbce79422297fa9dde7b9b3ad2b4acfe3e8d720e16c727c4d82562bfc090f30f3d26285b043f16d93bf7f14dce447d1e3af3ce43c8a504e49bfc4783317aa47caad3ef1aa17054065bed9596167151dd26ee196545376456e5210459ce28b3908d2f6f5475f191946c124964ce91646c5763a4121430ac102aabc7e984730ba89e1d9aebc36eaf3ca6a3bb556b8aaef26c24bfdaffc50f93fbcc7142e95020a40e143464014e1725f5c36fe80a7ad1fe108dd29f314ed9402b612ba5986444138415e31f1a56a8b4a67a8e3c8b59e3e4def0c66523b37fde3d66de0874b123f9345d1d14a8e43730cb9c00a121dc0be981b", 0xf5}, {&(0x7f0000000300)="c8abc2844d0d69808e3b1d0cde532e83289a4478227db7f04d6d70335e8f67201617a2115c39b816223fc2782a7c2d0f7a5c07f31bb0613270489fd0cfe4ec2086446ac58585f5946fdf5e6fb68d710bac29fbcc76f716dff14a013e210285ab774d575ce5d3815daaa09b0e794d67aac66b11ac1b487e366f0f66f8645c259c60031527dc6f6908109a17179aa304bdf90cb873574153f416c7d71eecf7656a49f4abb9120d3a4fef215fba93deba5522248bf59af706d88eca1a3b56675ced3bb0a0d2478bce613e0c4fe34ac3e8babc1af21b", 0xd4}, {&(0x7f0000000400)="1bfde450ff50cb8d539b98071eb02321c14f71b507a16de37d276f9b755e97a52f5fba465e94fcc41640b191b0e28d38e9ed0c68f4f0859c99128c1747d456f700faac6ee0b60a83cea5d32ae56b5c269fc05576ff6d275c553e74bdd388b68fa673cdda5336cd936f", 0x69}, {&(0x7f0000000480)="00eb1c478229b0cb6342d40337a4bfd204a422c4a50e5672d8c2493bce97895c59caa2ed854ddc78be26b624ae2a202a3e159881ada8798483e69a2fd31d43b9930346448845a003385be90c688dcd96d4a7f04b4d50e27dc6547fe08e0e47557838d0746b9f5d91855cdea27c6f8a5a6a936c6fa2640df3cd9b29330ecb", 0x7e}], 0x7, r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001700)=@int=0x80, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000001800)={0x5, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000001740)={0x2, 0x80, 0x80b, 'queue0\x00', 0x3}) 01:09:38 executing program 2: socketpair(0x14, 0x9a, 0x0, &(0x7f0000000140)) 01:09:38 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="c36502790283", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x18, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local}}}}}}, 0x0) 01:09:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) [ 575.534407][T19275] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 575.556528][T19275] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! 01:09:44 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:09:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xfffff000, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() rt_tgsigqueueinfo(r0, 0x0, 0x16, &(0x7f0000000000)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd992e77d516a7d52}, 0x800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10346, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x4e, 0x401}, {0x7, 0x7}]}) ptrace(0x10, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0}) 01:09:44 executing program 2: socketpair(0x14, 0x9b, 0x0, &(0x7f0000000140)) 01:09:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x8, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xffffffff, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x104, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x40, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001808}, 0x20000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x40) close(r6) 01:09:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xa00, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xffffff7f, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:45 executing program 2: socketpair(0x14, 0x9c, 0x0, &(0x7f0000000140)) 01:09:45 executing program 5 (fault-call:5 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:09:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0xf23, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20}}}, 0x118) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:09:45 executing program 4: clone(0xebaa0a693a012532, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x20000000, &(0x7f0000000140)="216c5353f8d300aa63ee9d51d2381da52f65341edf3cb4899961be686c4d1333c57ca38bbfdeacc827bfb2419103f1f35348d36aea0dc28aed9c49705df8efe816f609c3da677bea146a5e1a0c4a0a09dc115e09ba62e45cb795a4029a2705bb0a8541d8dcd45856a6dfbfc54f5cb9edd03c2d90c4545bf8433e8b3c848045bb5488bc8b6bcaf0941807d25b9cb29be9ce80df740a12") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 582.405121][T19405] FAULT_INJECTION: forcing a failure. [ 582.405121][T19405] name failslab, interval 1, probability 0, space 0, times 0 01:09:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xffffff9e, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 582.507656][T19405] CPU: 1 PID: 19405 Comm: syz-executor.5 Not tainted 5.5.0-rc2-syzkaller #0 [ 582.516370][T19405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.526474][T19405] Call Trace: [ 582.529791][T19405] dump_stack+0x197/0x210 [ 582.534155][T19405] should_fail.cold+0xa/0x15 [ 582.538764][T19405] ? fault_create_debugfs_attr+0x180/0x180 [ 582.544567][T19405] ? ___might_sleep+0x163/0x2c0 [ 582.549413][T19405] __should_failslab+0x121/0x190 [ 582.554347][T19405] should_failslab+0x9/0x14 [ 582.558834][T19405] kmem_cache_alloc_node+0x268/0x740 [ 582.564103][T19405] ? lockdep_hardirqs_on+0x421/0x5e0 [ 582.569449][T19405] ? trace_hardirqs_on+0x67/0x240 [ 582.574484][T19405] copy_process+0x3be/0x7230 [ 582.579064][T19405] ? __might_fault+0x12b/0x1e0 [ 582.583833][T19405] ? __kasan_check_read+0x11/0x20 [ 582.588887][T19405] ? lock_downgrade+0x920/0x920 [ 582.593736][T19405] ? __cleanup_sighand+0xc0/0xc0 [ 582.598673][T19405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.605010][T19405] ? _copy_from_user+0x12c/0x1a0 [ 582.609953][T19405] _do_fork+0x146/0x1090 [ 582.614187][T19405] ? copy_init_mm+0x20/0x20 [ 582.618691][T19405] __do_sys_clone3+0x1fb/0x340 [ 582.623453][T19405] ? _do_fork+0x1090/0x1090 [ 582.627947][T19405] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 582.634170][T19405] ? fput_many+0x12c/0x1a0 [ 582.638574][T19405] ? fput+0x1b/0x20 [ 582.642364][T19405] ? ksys_write+0x1cf/0x290 [ 582.646858][T19405] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 582.652302][T19405] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 582.657752][T19405] ? do_syscall_64+0x26/0x790 [ 582.662416][T19405] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.668470][T19405] ? do_syscall_64+0x26/0x790 [ 582.673133][T19405] ? lockdep_hardirqs_on+0x421/0x5e0 [ 582.678407][T19405] __x64_sys_clone3+0x54/0x80 [ 582.683070][T19405] do_syscall_64+0xfa/0x790 [ 582.687562][T19405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.693466][T19405] RIP: 0033:0x45a919 [ 582.697354][T19405] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.716945][T19405] RSP: 002b:00007f8ab4ba7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 582.725340][T19405] RAX: ffffffffffffffda RBX: 00007f8ab4ba7c90 RCX: 000000000045a919 [ 582.733295][T19405] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000020000600 [ 582.741250][T19405] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 582.749204][T19405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab4ba86d4 [ 582.757159][T19405] R13: 00000000004c100d R14: 00000000004d4ca0 R15: 0000000000000007 01:09:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:09:54 executing program 2: socketpair(0x14, 0x9d, 0x0, &(0x7f0000000140)) 01:09:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:09:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xfffffff0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:09:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) getsockname(r1, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000340)=0x80) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x58100, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000180)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) waitid(0x3, r4, &(0x7f0000000140), 0x80000000, &(0x7f00000001c0)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:09:54 executing program 5 (fault-call:5 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:09:54 executing program 2: socketpair(0x14, 0x9e, 0x0, &(0x7f0000000140)) [ 591.513247][T19531] FAULT_INJECTION: forcing a failure. [ 591.513247][T19531] name failslab, interval 1, probability 0, space 0, times 0 01:09:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0xffffffff, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 591.577490][T19531] CPU: 0 PID: 19531 Comm: syz-executor.5 Not tainted 5.5.0-rc2-syzkaller #0 [ 591.586213][T19531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.596277][T19531] Call Trace: [ 591.599588][T19531] dump_stack+0x197/0x210 [ 591.603964][T19531] should_fail.cold+0xa/0x15 [ 591.608584][T19531] ? fault_create_debugfs_attr+0x180/0x180 [ 591.614416][T19531] ? ___might_sleep+0x163/0x2c0 [ 591.619301][T19531] __should_failslab+0x121/0x190 [ 591.624270][T19531] should_failslab+0x9/0x14 [ 591.628790][T19531] kmem_cache_alloc+0x2aa/0x710 [ 591.633662][T19531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.639967][T19531] ? __validate_process_creds+0x22d/0x380 [ 591.639987][T19531] prepare_creds+0x3e/0x6b0 [ 591.650193][T19531] copy_creds+0xa8/0x7a0 [ 591.650217][T19531] copy_process+0x128d/0x7230 [ 591.659120][T19531] ? __might_fault+0x12b/0x1e0 [ 591.663904][T19531] ? __kasan_check_read+0x11/0x20 [ 591.668959][T19531] ? __cleanup_sighand+0xc0/0xc0 [ 591.673929][T19531] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 591.680191][T19531] ? _copy_from_user+0x12c/0x1a0 [ 591.685152][T19531] _do_fork+0x146/0x1090 [ 591.689411][T19531] ? copy_init_mm+0x20/0x20 [ 591.693936][T19531] __do_sys_clone3+0x1fb/0x340 [ 591.698717][T19531] ? _do_fork+0x1090/0x1090 [ 591.703251][T19531] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 591.709511][T19531] ? fput_many+0x12c/0x1a0 [ 591.713951][T19531] ? fput+0x1b/0x20 [ 591.717779][T19531] ? ksys_write+0x1cf/0x290 [ 591.722305][T19531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.727785][T19531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.733276][T19531] ? do_syscall_64+0x26/0x790 [ 591.737975][T19531] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.744082][T19531] ? do_syscall_64+0x26/0x790 [ 591.748777][T19531] ? lockdep_hardirqs_on+0x421/0x5e0 [ 591.754087][T19531] __x64_sys_clone3+0x54/0x80 [ 591.758782][T19531] do_syscall_64+0xfa/0x790 [ 591.763308][T19531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.769222][T19531] RIP: 0033:0x45a919 01:09:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() fanotify_init(0x1, 0x101000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4, 0x4e24, 0xf39f06bd50d16b31}, &(0x7f0000000080)=0xc) 01:09:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = accept$unix(r2, &(0x7f0000000400), &(0x7f0000000480)=0x6e) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="925fb4b297347c87c92652bf1df9a0ed37572950487dc99fee756380e7bb03e8731b0a4efdf8d4f944f2710771f132b9aa2c2a8bf434afd1c9c49e26c49f0483915b9c3f611b03bd61031223c67f5c25db9bf72fd636b833037abfe5215b13b37772dd70b4f7c47d15176f3117dd52d77c488aacf843c03d8ea1db2b917cb547cfb89ec611120996400f31e73b62c01fa98137f303384da3bef8c80343486f11daccd9456ccb73c5dfc4e0307028de2794835f24fc435da2c8d84d34927c7d11965e5613baea0ce86fb730ff9352de", 0xcf}, {&(0x7f0000000180)="3e1223246da508b16e2388acf9b5e01245068452e7c4385d7748b6fd4aebf315ea48be362bf888223692bf423d67666b7e376d153618b6ed2c71c378d0b38d85dd6f0c719194653e435618fdf937a7da78aeee31cf8a938066af583a23e18537cdfd484fa5dd7d6cd4cb33d069b460ee5b0dd655b637b56d2a40a76997c5ee1fc60bbf3a3bb437f2914fda0f52965ad9e8e5f390fa349ff5", 0x98}, {&(0x7f0000000240)="06a6fe3a0737880d0de2b939d5999197bf5f59d914f347b424ae7b1cddb72de3091fe36c94f9566643b2cd63b7716bb815bac7ea00c0e6e92fb2f2dd757acf2bfd6c26f07a570e2dcb4cc38252a48f7db3c9e8889006c155e607271d840ee914ad91d32a56c029a25d4cc5fafefbd9e1d7b399b73fbd29a9bf22be8c15fe5cdd85fb62f42994a65946192ced8621f334b83355d9f1b57f0f94bde407b895e1cbddf6b63e928dedea9fd0b0aeda578b5aae6876e3", 0xb4}, {&(0x7f0000000300)="6b52e4170e5408bfc8c3b1ba9116ec6e804acb954441e7e43f8c6937a11753bba4928c972219e24b5da8ede87ea4eccb056ebeb9fa179276a8bb392a24a2d25e3f3cc205da8ab2ae497afd8aee842a3062bc2fe9aa027532b0b7ee191944553481e10627acaadc0b83c9790a8504a0e77c64f57740ba047bcce78db03e09d35b71690113d176db38eb143b9562e130971da162b66c9c5b9c2a3eb1e498cdea0b06f24961dbf183bb6cd08b4530133cff05152496c8f8af9f66caf4608cc81dd23cac", 0xc2}], 0x4) 01:09:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 591.773127][T19531] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.792762][T19531] RSP: 002b:00007f8ab4ba7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 591.801258][T19531] RAX: ffffffffffffffda RBX: 00007f8ab4ba7c90 RCX: 000000000045a919 [ 591.801266][T19531] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000020000600 [ 591.801273][T19531] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 01:09:54 executing program 2: socketpair(0x14, 0x9f, 0x0, &(0x7f0000000140)) [ 591.801280][T19531] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab4ba86d4 [ 591.801287][T19531] R13: 00000000004c100d R14: 00000000004d4ca0 R15: 0000000000000007 01:10:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:02 executing program 5 (fault-call:5 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) linkat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:10:02 executing program 2: socketpair(0x14, 0xa0, 0x0, &(0x7f0000000140)) 01:10:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:02 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x481004}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf2525000000080001007063690014000200303030303a30303a31302e30ffe4000008008b006356362b9fe5a537221468fda5dbdd3dc86eb60d0c9b93d93dc2b2337f4e325eedfa61ef457cb16d2071b9ec37b474cfcd588668771b7000"/114, @ANYRES32=r2, @ANYBLOB="080001007063690014000200303030303a30303a31302e300000000008008c0000000000100001006e657464657673696d000000100002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="080001007063690014000200303030303a30303a31302e300000000008008b00", @ANYRES32=r0, @ANYBLOB="080001007063690014000200303030303a30303a31302e300000000008008b00", @ANYRES32=r0, @ANYBLOB="100001006e657464657673696d000000100002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="080001007063690014000200303030303a30303a31302e300000000008008c0001000000"], 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 599.864368][T19668] FAULT_INJECTION: forcing a failure. [ 599.864368][T19668] name failslab, interval 1, probability 0, space 0, times 0 [ 599.887347][T19668] CPU: 1 PID: 19668 Comm: syz-executor.5 Not tainted 5.5.0-rc2-syzkaller #0 [ 599.896077][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.906147][T19668] Call Trace: [ 599.909464][T19668] dump_stack+0x197/0x210 01:10:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) 01:10:02 executing program 2: socketpair(0x14, 0xa1, 0x0, &(0x7f0000000140)) 01:10:02 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20000, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 599.913818][T19668] should_fail.cold+0xa/0x15 [ 599.918428][T19668] ? find_held_lock+0x35/0x130 [ 599.923230][T19668] ? fault_create_debugfs_attr+0x180/0x180 [ 599.929062][T19668] ? ___might_sleep+0x163/0x2c0 [ 599.933934][T19668] __should_failslab+0x121/0x190 [ 599.938897][T19668] should_failslab+0x9/0x14 [ 599.943419][T19668] __kmalloc+0x2e0/0x770 [ 599.947685][T19668] ? security_prepare_creds+0x11d/0x190 [ 599.953253][T19668] security_prepare_creds+0x11d/0x190 [ 599.958664][T19668] prepare_creds+0x4bd/0x6b0 [ 599.963280][T19668] copy_creds+0xa8/0x7a0 [ 599.967537][T19668] copy_process+0x128d/0x7230 [ 599.972236][T19668] ? __might_fault+0x12b/0x1e0 [ 599.977021][T19668] ? __kasan_check_read+0x11/0x20 [ 599.982077][T19668] ? __cleanup_sighand+0xc0/0xc0 [ 599.987021][T19668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 599.993273][T19668] ? _copy_from_user+0x12c/0x1a0 [ 599.993291][T19668] _do_fork+0x146/0x1090 [ 599.993306][T19668] ? copy_init_mm+0x20/0x20 [ 599.993332][T19668] __do_sys_clone3+0x1fb/0x340 01:10:02 executing program 2: socketpair(0x14, 0xa2, 0x0, &(0x7f0000000140)) [ 599.993345][T19668] ? _do_fork+0x1090/0x1090 [ 599.993366][T19668] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 599.993380][T19668] ? fput_many+0x12c/0x1a0 [ 599.993395][T19668] ? fput+0x1b/0x20 [ 599.993406][T19668] ? ksys_write+0x1cf/0x290 [ 599.993426][T19668] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 600.040744][T19668] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 600.046207][T19668] ? do_syscall_64+0x26/0x790 [ 600.046224][T19668] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.046236][T19668] ? do_syscall_64+0x26/0x790 01:10:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) close(r2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x250000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000080)) [ 600.046254][T19668] ? lockdep_hardirqs_on+0x421/0x5e0 [ 600.066932][T19668] __x64_sys_clone3+0x54/0x80 [ 600.071624][T19668] do_syscall_64+0xfa/0x790 [ 600.076152][T19668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.082065][T19668] RIP: 0033:0x45a919 [ 600.085978][T19668] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 600.105585][T19668] RSP: 002b:00007f8ab4ba7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 01:10:02 executing program 2: socketpair(0x14, 0xa3, 0x0, &(0x7f0000000140)) [ 600.105601][T19668] RAX: ffffffffffffffda RBX: 00007f8ab4ba7c90 RCX: 000000000045a919 [ 600.105609][T19668] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000020000600 [ 600.105616][T19668] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 600.105623][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab4ba86d4 [ 600.105630][T19668] R13: 00000000004c100d R14: 00000000004d4ca0 R15: 0000000000000007 01:10:11 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2002, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:11 executing program 5 (fault-call:5 fault-nth:3): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) rt_tgsigqueueinfo(r0, r1, 0x31, &(0x7f00000000c0)={0x4, 0xfffffffd, 0xfffffffc}) ptrace(0x10, r0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='gid_map\x00') r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9, 0x405, 0x2, 0x0, 0x6, 0x4, 0x3ff, r5}, &(0x7f0000000080)=0x20) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:10:11 executing program 2: socketpair(0x14, 0xa4, 0x0, &(0x7f0000000140)) 01:10:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x1, 0x9]) flistxattr(r1, &(0x7f00000000c0)=""/129, 0x81) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='m\x00\xfb\xff\x18\x00', 0x400000, 0x0) close(r3) 01:10:11 executing program 2: socketpair(0x14, 0xa5, 0x0, &(0x7f0000000140)) [ 609.083550][T19805] FAULT_INJECTION: forcing a failure. [ 609.083550][T19805] name failslab, interval 1, probability 0, space 0, times 0 [ 609.170558][T19805] CPU: 0 PID: 19805 Comm: syz-executor.5 Not tainted 5.5.0-rc2-syzkaller #0 [ 609.179280][T19805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.189348][T19805] Call Trace: [ 609.192664][T19805] dump_stack+0x197/0x210 [ 609.197021][T19805] should_fail.cold+0xa/0x15 [ 609.201975][T19805] ? __x64_sys_clone3+0x54/0x80 [ 609.206852][T19805] ? fault_create_debugfs_attr+0x180/0x180 [ 609.212698][T19805] ? ___might_sleep+0x163/0x2c0 01:10:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x7aa, 0xf6fd6f90eaacbb06) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={0x0, 0x100, 0x0, 0x20000000000006, 0x3}, &(0x7f0000000240)=0xffffffffffffff18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0x4}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000002c0)={0x40, "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"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/11) wait4(0x0, 0x0, 0x80000002, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r3, 0x0, &(0x7f0000000280)={0x0}) 01:10:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x4}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)="a729711f9baa243cc03d7cd3ef0c61aafe22ddc61c424dbf6d8951b7a87b2e2825", 0x21) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000340)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x5, 0x3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$inet(0x2, 0x80001, 0x84) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0xc16c5d35d2badbd, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) r8 = getpgrp(0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x40000, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x4, 0x8, 0x81, 0x14, 0x0, 0x4, 0x54993, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0xea69145a083ebda1, 0x9, 0x10000, 0x9, 0x3ff, 0x7, 0x5}, r8, 0xd, r9, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x5}, 0x8) [ 609.217576][T19805] __should_failslab+0x121/0x190 [ 609.222542][T19805] should_failslab+0x9/0x14 [ 609.227073][T19805] kmem_cache_alloc_node+0x268/0x740 [ 609.232373][T19805] ? ___might_sleep+0x163/0x2c0 [ 609.232402][T19805] alloc_vmap_area+0x147/0x2030 [ 609.242095][T19805] ? __get_vm_area_node+0x12b/0x4f0 [ 609.247310][T19805] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 609.252885][T19805] ? purge_vmap_area_lazy+0x40/0x40 [ 609.258105][T19805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.264370][T19805] ? debug_smp_processor_id+0x33/0x18a [ 609.269855][T19805] __get_vm_area_node+0x179/0x4f0 [ 609.274901][T19805] __vmalloc_node_range+0xd4/0x810 [ 609.280019][T19805] ? _do_fork+0x146/0x1090 [ 609.280037][T19805] ? lockdep_hardirqs_on+0x421/0x5e0 [ 609.280051][T19805] ? _do_fork+0x146/0x1090 [ 609.280065][T19805] copy_process+0x9aa/0x7230 [ 609.280078][T19805] ? _do_fork+0x146/0x1090 [ 609.280090][T19805] ? __might_fault+0x12b/0x1e0 [ 609.280103][T19805] ? __kasan_check_read+0x11/0x20 [ 609.280118][T19805] ? lock_downgrade+0x920/0x920 01:10:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x5}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 609.280139][T19805] ? __cleanup_sighand+0xc0/0xc0 [ 609.280160][T19805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 609.280181][T19805] ? _copy_from_user+0x12c/0x1a0 [ 609.280199][T19805] _do_fork+0x146/0x1090 [ 609.329195][T19805] ? copy_init_mm+0x20/0x20 [ 609.329226][T19805] __do_sys_clone3+0x1fb/0x340 [ 609.329240][T19805] ? _do_fork+0x1090/0x1090 [ 609.329265][T19805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.329279][T19805] ? fput_many+0x12c/0x1a0 [ 609.329293][T19805] ? fput+0x1b/0x20 [ 609.329306][T19805] ? ksys_write+0x1cf/0x290 [ 609.329325][T19805] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.329343][T19805] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.376796][T19805] ? do_syscall_64+0x26/0x790 [ 609.376815][T19805] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.376829][T19805] ? do_syscall_64+0x26/0x790 [ 609.376844][T19805] ? lockdep_hardirqs_on+0x421/0x5e0 [ 609.376867][T19805] __x64_sys_clone3+0x54/0x80 [ 609.407663][T19805] do_syscall_64+0xfa/0x790 [ 609.412225][T19805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.418130][T19805] RIP: 0033:0x45a919 [ 609.422042][T19805] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.441663][T19805] RSP: 002b:00007f8ab4ba7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 609.450080][T19805] RAX: ffffffffffffffda RBX: 00007f8ab4ba7c90 RCX: 000000000045a919 [ 609.450089][T19805] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000020000600 01:10:12 executing program 2: socketpair(0x14, 0xa6, 0x0, &(0x7f0000000140)) [ 609.450096][T19805] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.450108][T19805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab4ba86d4 [ 609.450116][T19805] R13: 00000000004c100d R14: 00000000004d4ca0 R15: 0000000000000007 [ 609.631316][T19805] syz-executor.5: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 609.694691][T19805] CPU: 1 PID: 19805 Comm: syz-executor.5 Not tainted 5.5.0-rc2-syzkaller #0 [ 609.703411][T19805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.713482][T19805] Call Trace: [ 609.716796][T19805] dump_stack+0x197/0x210 [ 609.721155][T19805] warn_alloc.cold+0x87/0x164 [ 609.725855][T19805] ? zone_watermark_ok_safe+0x260/0x260 [ 609.731453][T19805] ? __get_vm_area_node+0x42e/0x4f0 [ 609.736733][T19805] ? kfree+0x226/0x2c0 [ 609.740796][T19805] ? lockdep_hardirqs_on+0x421/0x5e0 [ 609.746076][T19805] ? trace_hardirqs_on+0x67/0x240 [ 609.751106][T19805] ? __get_vm_area_node+0x42e/0x4f0 [ 609.756290][T19805] ? __get_vm_area_node+0x344/0x4f0 [ 609.761473][T19805] __vmalloc_node_range+0x4cf/0x810 [ 609.766659][T19805] ? lockdep_hardirqs_on+0x421/0x5e0 [ 609.771928][T19805] ? _do_fork+0x146/0x1090 [ 609.776453][T19805] copy_process+0x9aa/0x7230 [ 609.781095][T19805] ? _do_fork+0x146/0x1090 [ 609.785500][T19805] ? __might_fault+0x12b/0x1e0 [ 609.790268][T19805] ? __kasan_check_read+0x11/0x20 [ 609.795282][T19805] ? lock_downgrade+0x920/0x920 [ 609.800119][T19805] ? __cleanup_sighand+0xc0/0xc0 [ 609.805061][T19805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 609.811292][T19805] ? _copy_from_user+0x12c/0x1a0 [ 609.816214][T19805] _do_fork+0x146/0x1090 [ 609.820457][T19805] ? copy_init_mm+0x20/0x20 [ 609.824952][T19805] __do_sys_clone3+0x1fb/0x340 [ 609.829728][T19805] ? _do_fork+0x1090/0x1090 [ 609.834221][T19805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.840444][T19805] ? fput_many+0x12c/0x1a0 [ 609.844841][T19805] ? fput+0x1b/0x20 [ 609.848637][T19805] ? ksys_write+0x1cf/0x290 [ 609.853141][T19805] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.858583][T19805] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 609.864044][T19805] ? do_syscall_64+0x26/0x790 [ 609.868710][T19805] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.874760][T19805] ? do_syscall_64+0x26/0x790 [ 609.879442][T19805] ? lockdep_hardirqs_on+0x421/0x5e0 [ 609.884744][T19805] __x64_sys_clone3+0x54/0x80 [ 609.889410][T19805] do_syscall_64+0xfa/0x790 [ 609.894148][T19805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.900038][T19805] RIP: 0033:0x45a919 [ 609.903936][T19805] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.923530][T19805] RSP: 002b:00007f8ab4ba7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 609.931931][T19805] RAX: ffffffffffffffda RBX: 00007f8ab4ba7c90 RCX: 000000000045a919 [ 609.939884][T19805] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000020000600 [ 609.947836][T19805] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.955786][T19805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab4ba86d4 [ 609.963748][T19805] R13: 00000000004c100d R14: 00000000004d4ca0 R15: 0000000000000007 [ 609.975487][T19805] Mem-Info: [ 609.978865][T19805] active_anon:160070 inactive_anon:211 isolated_anon:0 [ 609.978865][T19805] active_file:7817 inactive_file:37677 isolated_file:0 [ 609.978865][T19805] unevictable:0 dirty:46 writeback:0 unstable:0 [ 609.978865][T19805] slab_reclaimable:13390 slab_unreclaimable:88098 [ 609.978865][T19805] mapped:59006 shmem:285 pagetables:2603 bounce:0 [ 609.978865][T19805] free:1209362 free_pcp:699 free_cma:0 [ 610.016968][T19805] Node 0 active_anon:640280kB inactive_anon:844kB active_file:31128kB inactive_file:150708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236024kB dirty:180kB writeback:0kB shmem:1140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 552960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 610.046026][T19805] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 610.072654][T19805] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.102588][T19805] lowmem_reserve[]: 0 2537 2537 2537 2537 [ 610.108380][T19805] Node 0 DMA32 free:1053212kB min:36104kB low:45128kB high:54152kB reserved_highatomic:0KB active_anon:640280kB inactive_anon:844kB active_file:31128kB inactive_file:150708kB unevictable:0kB writepending:180kB present:3129332kB managed:2601536kB mlocked:0kB kernel_stack:9220kB pagetables:10408kB bounce:0kB free_pcp:2796kB local_pcp:1444kB free_cma:0kB [ 610.141290][T19805] lowmem_reserve[]: 0 0 0 0 0 [ 610.145980][T19805] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.174109][T19805] lowmem_reserve[]: 0 0 0 0 0 [ 610.178843][T19805] Node 1 Normal free:3769056kB min:53780kB low:67224kB high:80668kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.211011][T19805] lowmem_reserve[]: 0 0 0 0 0 [ 610.215718][T19805] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 610.230066][T19805] Node 0 DMA32: 11369*4kB (UME) 3284*8kB (UME) 2182*16kB (UME) 955*32kB (UME) 404*64kB (UME) 94*128kB (UME) 32*256kB (UME) 14*512kB (UME) 6*1024kB (UME) 4*2048kB (UME) 207*4096kB (M) = 1052676kB [ 610.249198][T19805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 610.260648][T19805] Node 1 Normal: 14*4kB (UME) 107*8kB (UM) 187*16kB (UME) 91*32kB (UME) 37*64kB (UME) 18*128kB (UME) 6*256kB (UE) 4*512kB (UE) 2*1024kB (ME) 2*2048kB (ME) 915*4096kB (M) = 3769056kB [ 610.278673][T19805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 610.288272][T19805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 610.297607][T19805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 610.307253][T19805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 610.316584][T19805] 45778 total pagecache pages [ 610.322354][T19805] 0 pages in swap cache [ 610.326579][T19805] Swap cache stats: add 0, delete 0, find 0/0 [ 610.332749][T19805] Free swap = 0kB [ 610.336470][T19805] Total swap = 0kB [ 610.340283][T19805] 1965979 pages RAM [ 610.344083][T19805] 0 pages HighMem/MovableOnly [ 610.348795][T19805] 344068 pages reserved [ 610.352992][T19805] 0 pages cma reserved 01:10:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2010, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:21 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x1, &(0x7f0000000180)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x39, 0x8000}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000140)={0x300, 0x280, 0xf00, 0x20c8, 0x800, 0xed0e, 0x28, 0x1, {0x40000000, 0x2, 0x1}, {0x8000, 0x9, 0x1}, {0x0, 0x8, 0x1}, {0x1f66000, 0xffff, 0x1}, 0x2, 0x0, 0xd9, 0x59d, 0x0, 0x1, 0x0, 0xb129, 0x8, 0x0, 0x5, 0x1, 0x0, 0x0, 0x3, 0x9}) ioctl$KDMKTONE(r1, 0x4b30, 0x1) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:10:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:21 executing program 2: socketpair(0x14, 0xa7, 0x0, &(0x7f0000000140)) 01:10:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x20, @tick=0x100, 0x8, {0x8, 0x81}, 0x9, 0x2, 0x6}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/t\x86\xf4Qed-self\x00\x00tt\x89/cucrent\x00', 0x2, 0x0) fstat(r6, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e24, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0xd2}}}, &(0x7f00000001c0)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r8) 01:10:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:21 executing program 2: socketpair(0x14, 0xa8, 0x0, &(0x7f0000000140)) 01:10:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 618.397076][T19955] x86/PAT: syz-executor.5:19955 map pfn RAM range req uncached-minus for [mem 0x8df52000-0x8df53fff], got write-back 01:10:21 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x6, 0x7, 0x4, 0x0, {0x0, 0x7530}, {0x1, 0x1, 0x2, 0x1e, 0x99, 0x1}, 0xfffffffa, 0x3, @userptr=0x7, 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r1) 01:10:21 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x100000000000, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:10:21 executing program 2: socketpair(0x14, 0xa9, 0x0, &(0x7f0000000140)) 01:10:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x6000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:30 executing program 2: socketpair(0x14, 0xaa, 0x0, &(0x7f0000000140)) 01:10:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000080)=0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = dup2(r0, r3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000000c0)=0x80000000, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) 01:10:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x60}, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8100, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r3, 0x0, 0x40}, 0x8, 0x8}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001340)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r8, 0xffffffffffffffff}}) r9 = syz_open_dev$video4linux(&(0x7f0000001380)='/dev/v4l-subdev#\x00', 0x1, 0x20c401) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcsa\x00', 0x26200, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r13, 0xffffffffffffffff}}) pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff}, 0x80800) r15 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r15, 0x5433, 0x0) r16 = userfaultfd(0x100400) r17 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r17, 0x800000c004500a, &(0x7f0000000300)) r18 = getpid() sched_setscheduler(r18, 0x5, &(0x7f0000000380)) r19 = msgget$private(0x0, 0x0) msgsnd(r19, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r19, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r20, 0x0, 0x40}, 0x8, 0x8}) r21 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r22, 0xffffffffffffffff}}) r23 = getpgrp(0xffffffffffffffff) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r24, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r25, 0x0, 0x40}, 0x8, 0x8}) r26 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r27, 0xffffffffffffffff}}) r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) r29 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r29, 0x5433, 0x0) fstat(r29, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$midi(&(0x7f0000001980)='/dev/midi#\x00', 0x4, 0x88040) openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttynull\x00', 0x8000, 0x0) r32 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r32, 0x800000c004500a, &(0x7f0000000300)) r33 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r33, 0x800000c004500a, &(0x7f0000000300)) r34 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r35 = openat$cgroup_procs(r34, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r36 = gettid() write$cgroup_pid(r35, &(0x7f0000000580)=r36, 0x12) r37 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa4ee027d8334c53c, 0x2812, r37, 0x0) r38 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ad, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, r38, 0x0) r39 = getpid() sched_setscheduler(r39, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r41 = getpid() sched_setscheduler(r41, 0x5, &(0x7f0000000380)) r42 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r42}, 0x0) r43 = getpgid(0x0) r44 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r45 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r46 = dup2(r45, r44) ppoll(&(0x7f0000000200)=[{r46}], 0x1, &(0x7f0000000280), 0x0, 0x0) r47 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r48 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r48, 0x5452, &(0x7f0000000040)) fcntl$getownex(r48, 0x10, &(0x7f0000000580)={0x0, 0x0}) r50 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r51, &(0x7f0000000140)=ANY=[], 0xfef0) r52 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r52, 0x8933, &(0x7f0000000440)={'team0\x00'}) r53 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r53, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(r53, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/131, 0x3e1}], 0x6, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r52, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@dellink={0x70, 0x11, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r54, 0x400, 0x40204}, [@IFLA_NET_NS_PID={0x8, 0x13, r55}, @IFLA_EVENT={0x8, 0x2c, 0x5f}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x8bc}, @IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1f}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r50, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=r52, @ANYRESHEX=r41, @ANYRESDEC=r51], 0x8, 0x1) r56 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r56, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r56, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r57 = gettid() waitid(0x83b895581628fca4, r57, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r56, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r57]], 0xfffffffffffffe56}}, 0x20004850) r58 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r59 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r60 = dup2(r59, r58) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r60, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r61 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r61) r62 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r62, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r62, 0x227d, &(0x7f0000000780)) kcmp(r61, r57, 0x0, 0xffffffffffffffff, r62) ptrace$setopts(0x4206, r61, 0x0, 0x0) r63 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r61, r63, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r57, r60, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r49, r50, 0x0, 0x1, &(0x7f0000000080)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r47, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r43, r46, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r42, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r41, r40, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r39, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r38, 0x0, 0x15, &(0x7f0000000000)='trusted@lo-{security\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r36, r37, 0x0, 0xd, &(0x7f00000007c0)='keyring^-proc', r64}, 0x30) r65 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a00)={r64}, 0xc) r66 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r66, 0x5433, 0x0) r67 = syz_open_dev$admmidi(&(0x7f0000001a40)='/dev/admmidi#\x00', 0xffff, 0xc0) r68 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/capi20\x00', 0x7040, 0x0) r69 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r69, 0x800000c004500a, &(0x7f0000000300)) r70 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r70, 0x800000c004500a, &(0x7f0000000300)) r71 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r71, 0x800000c004500a, &(0x7f0000000300)) signalfd4(r71, &(0x7f0000001ac0)={0x97b0}, 0x8, 0x1800) r72 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r72, 0x5433, 0x0) r73 = msgget$private(0x0, 0x0) msgsnd(r73, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r73, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r74, 0x0, 0x40}, 0x8, 0x8}) sendmmsg$unix(r1, &(0x7f0000001c40)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="e3ba0203fdd269ed7a5c3ca0df5c01bf6b1ac1c8ecc9418f6a06620504b58a7421dbbc548663bc4171cd6fd6", 0x2c}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000180)="35ad44c2ab017b20356a02933994d0f7ddd625157626cdbf6837ccc57d5fac2c2eb3f2d5d19e87524923e518ff09a1c65dde8e81a48e435e4e0510be387b19a2f9eb054cdf8eb1d27fca964f7d87d4ce993f1c7054ad0c9f938a5a0e4f600e495551afd88e754f554412e3023498488c1d70de4b0f7305510f40", 0xfffffffffffffffb}], 0x3, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r74, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}], 0x58, 0x20024860}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001500)="68f4e636f37674545652953cc60a0b32d2310cc0b1aa4a73d6d7bca68c3344ccea12c01927e207d9b2d14c221f53a1a11efef071aea85a4de9e0a26c1dc3d1b252f3c03c33d3df617572fdb27463175e4810aca9ac0ea8241e9df27896c5a0139511b377bb250612af6a9f08bfb38fe3ea0e137888a2db3d485ed45187fc", 0x7e}, {&(0x7f0000001580)="57ea027def3d062856c93ad640c4daed069a5db52fe4f93d876622521348c8da77d58d14cb90b8c50834798ad90dbbe5da0be7eacf1d4290d1de1dd653810e83484c43c5828cfe5c0497612e2963cff98c4065999d93a69fe49753b7c2a1561a0bcfb96abbf8232679385917189c988a3b52716d287dcdc669228d9e915773ac866341c3b40dc5bb46fcc586597e25", 0x8f}, {&(0x7f0000001640)="2624f07e087745174ca9d2905f0eaf769c0e722f2147beadb8846649ab7c18278aeedf8348bfb99b23d7a7f24ebf92c9c2523605b2d79a2bd10af4420bd72880e9b0617c2e0af56aeedd942e3a4fa740f642f5eb1773b074cf483af8a34a1e5d95c5021496fa566c48cf2f2554c3463e6bce2f1c3749a947a7a9cd597b0d3246e7729b301419ac3c01d5ff9d982a", 0x8e}, {&(0x7f0000001700)="6f6184413ca4dc20f4de0010b7ad3e9e19b2121f", 0x14}], 0x4, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r0, r11, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r15, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r20, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r25, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r30, r31}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r33, r65, r66, r67, r68, r69]}}, @rights={{0x10}}], 0xe8, 0x10}], 0x0, 0x24000400) 01:10:30 executing program 2: socketpair(0x14, 0xab, 0x0, &(0x7f0000000140)) 01:10:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/d\xc1\x12/nvram\x00', 0x600000, 0x0) close(r2) [ 627.887251][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 627.893161][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:10:30 executing program 2: socketpair(0x14, 0xac, 0x0, &(0x7f0000000140)) 01:10:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 627.967225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 627.973088][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:10:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0xfaff, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x11, 0x8, 0xa8, &(0x7f00000001c0)="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"}) ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x3, 0x9, 0x3, 0x0, 0x0, [{r0, 0x0, 0x7}, {0xffffffffffffffff, 0x0, 0xba575fb}, {r1, 0x0, 0x2}]}) fcntl$dupfd(r0, 0x0, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r6) 01:10:37 executing program 2: socketpair(0x14, 0xad, 0x0, &(0x7f0000000140)) 01:10:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:10:37 executing program 2: socketpair(0x14, 0xae, 0x0, &(0x7f0000000140)) 01:10:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:37 executing program 2: socketpair(0x14, 0xaf, 0x0, &(0x7f0000000140)) 01:10:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fff, 0x10002) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:10:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() ioperm(0x2, 0x0, 0x1) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000040)={&(0x7f00000002c0)=""/4096, 0x1000}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000140)) 01:10:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0xffff8000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:44 executing program 2: socketpair(0x14, 0xb0, 0x0, &(0x7f0000000140)) 01:10:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1084) signalfd(r1, &(0x7f00000000c0)={0x6}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_mtu=0x9}) 01:10:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140), 0x217, 0x5, 0xe0, 0x5, 0x40, 0x7, {0x3, 0x10, 0x9, 0x1, 0x5, 0x0, 0x0, 0x2, 0x0, 0x6, 0x3, 0x8, 0x7, 0x40, "203e941ef126636fb10b3fd5ccf8a358be1f5285d3399f6e56363f86357e9e5e"}}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1108fcb7) 01:10:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:45 executing program 2: socketpair(0x14, 0xb1, 0x0, &(0x7f0000000140)) 01:10:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/u\xee\xecN7') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000080)="bcfb0f95ac2108154a3d6b50edafbeae6bc11e34599b419ee6368088f8dd53903f5e08b4c2f2ea8a19fcea48f1c3f761cd994ecc75ff3ea1214fb952a50b3165762e321ebb30ff56d5d7646e71f3475e7bce52f670ff8a28098423c0ecec19a3757310617bea81364e678a1b842f5a79391c712d2bd51e56b83596cb2565543bd61d6e857202088832b5a50ec4232e06d9e47bdb52bf6252f832cb6fffeb5c633733c31234a9392168ca40faa1bc469821e0ac3b9592ac6c59decbec797d45ccbb52d10376b18daaf4571be99a6884e31127db0290327ce7baa62b3a6bcadc6276c0b3d0b673fa79d59df604be0e69ae809d408c619aac3f4922eb") r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/le&\xbd2\xa8ram\x00', 0x406000, 0x0) close(r3) 01:10:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x7fffdffff000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:10:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/18) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x8, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x0, 0x6}, &(0x7f0000000180)=0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x120080, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@initdev}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) 01:10:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:54 executing program 2: socketpair(0x14, 0xb2, 0x0, &(0x7f0000000140)) 01:10:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:10:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x19, 0x0, @thr={&(0x7f0000000000)="3aec78e477afbf7689e0aed94dabe721f345a3e0ab1a6d1c5d4966260003497cfb30f371061c677d07aeff6dec535083a9227126", &(0x7f0000000140)="c11867ae8f7a0e82ff0edb27bcda70e52fdaf3a475aa12cd677ffbb0b72c730280acd60efff38bb3a3485023bf85979d2ea23c1cc275816bad9b579fb87902e30691b3c3d354f2f3e8dbb5e2e2dfc9132937841986319c4c00c68f7b198861ec29f5c7e0a16b611803125f066ce20d1fbbaed6b66fb83fa54face466a35f3d11cd3b4ba4b1604d6e35eaa4750e040375d1190f165172c5b795c30f454a40ea9ff966c95d3c1263a4e73db430371765c623ca97029ec3b5156b43c77ae9419edf9a6e2c7f7b153525"}}, &(0x7f0000000080)) 01:10:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xf0}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:10:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r0) 01:10:54 executing program 2: socketpair(0x14, 0xb3, 0x0, &(0x7f0000000140)) 01:10:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) geteuid() syz_open_dev$char_usb(0xc, 0xb4, 0x5) close(r2) 01:10:54 executing program 2: socketpair(0x14, 0xb4, 0x0, &(0x7f0000000140)) 01:10:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x300}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x7ffffffff000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:03 executing program 2: socketpair(0x14, 0xb5, 0x0, &(0x7f0000000140)) 01:11:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x500}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000000)) setgroups(0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000080)=0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000100)={0x3, "6eb6617679d3fc6a69c296592166cade9d854e9309e7ca1c6ee9799d781435a6", 0x3, 0x3}) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000000c0)={0x6, 0x3c06f5, "713fb3f0f5dc73b2ae08c985ce32a541955570eb3bc65d70", {0xfffffff9}, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x43, 0x4, 0x1}, 0x101}}, 0x18) 01:11:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) fcntl$getown(0xffffffffffffffff, 0x9) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f00000000c0)={0x40000, 0x7fff}) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r1, 0x80000000000, &(0x7f0000000040)="b13dbb967be61271bbbd677d88d7e87d082f554ede9e75d74e85abfb54b227d95333def1640da45d979d853b56e45088d00e46fe9b24fba3d69cc38940") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) 01:11:03 executing program 2: socketpair(0x14, 0xb6, 0x0, &(0x7f0000000140)) 01:11:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'\nth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000240)=0x500080, 0x4) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4144}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000340)=0x234) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000100)=0x1007ffe, 0xffffffffffffffab) close(r6) 01:11:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xa00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:03 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x3518c0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4208, 0xffffffffffffffff) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) inotify_init1(0x800) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x9, @empty, 0xff2}, {0xa, 0x4e24, 0x6, @mcast2, 0x9}, 0x8, [0x3, 0xf1, 0x2, 0x3, 0x7, 0x3ff, 0x0, 0x7]}, 0x5c) [ 660.887072][T21529] tipc: Enabling of bearer < [ 660.887072][T21529] th:caif0> rejected, media not registered 01:11:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 660.975658][T21573] tipc: Enabling of bearer < [ 660.975658][T21573] th:caif0> rejected, media not registered 01:11:03 executing program 2: socketpair(0x14, 0xb7, 0x0, &(0x7f0000000140)) 01:11:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xe00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='m\x00\x00\x00\x00\x00\x05\xc9\x00@\x00', 0x200, 0x0) close(r2) 01:11:08 executing program 2: socketpair(0x14, 0xb8, 0x0, &(0x7f0000000140)) 01:11:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x9, 0x3, 0x4, 0x0, {}, {0x0, 0xc, 0x5, 0x5a, 0x1, 0x20, "a9c5a0a0"}, 0x2, 0x1, @fd, 0x4}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4, 0x9, 0x2, 0x7, 0xc, 0x53, 0xf6, 0x81, 0x2, 0x80}) r3 = getpid() fcntl$getown(r0, 0x9) ioprio_set$pid(0x2, r3, 0x3) rt_tgsigqueueinfo(r3, r3, 0x5, &(0x7f0000000140)={0x0, 0xffffffff}) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000040)={0x0}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000000)={{0x4, @addr=0x8}, 0x8, 0x80000001, 0x9}) 01:11:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xf00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x2, 'caif0\x00', {0x1000}, 0x4281}) 01:11:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x3f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:08 executing program 2: socketpair(0x14, 0xb9, 0x0, &(0x7f0000000140)) 01:11:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) unshare(0x8020000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) r2 = getpid() r3 = socket$inet(0x2, 0x1, 0x3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x0) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) 01:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = getpid() write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000005c0), 0x4) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000380)={0x20000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0, &(0x7f0000000180)=""/174, 0xae, &(0x7f0000000240)=""/206, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, r3, 0x0], 0x5}, 0x50) sendmsg$nl_netfilter(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100094a2}, 0xad, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x1, 0x6, 0x100, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x6}}, 0xfffffffffffffdca}, 0x1, 0x0, 0x0, 0x40002000}, 0x800) close(r2) 01:11:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9fc00, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x4000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:15 executing program 2: socketpair(0x14, 0xba, 0x0, &(0x7f0000000140)) 01:11:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$RTC_UIE_ON(r2, 0x7003) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:11:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/unix\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$TCSETX(r2, 0x5433, 0x0) fcntl$setpipe(r2, 0x407, 0x1) r5 = getpgid(r0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) rt_tgsigqueueinfo(r6, r5, 0x17, &(0x7f0000000000)={0x10034, 0x8001, 0x82}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:11:16 executing program 2: socketpair(0x14, 0xbb, 0x0, &(0x7f0000000140)) 01:11:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x6000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:11:16 executing program 2: socketpair(0x14, 0xbc, 0x0, &(0x7f0000000140)) 01:11:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x7f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:25 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0000, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x120b0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000000)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:11:25 executing program 2: socketpair(0x14, 0xbd, 0x0, &(0x7f0000000140)) 01:11:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xf000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000580)=r6, 0x12) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa4ee027d8334c53c, 0x2812, r7, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ad, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r12}, 0x0) r13 = getpgid(0x0) r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r15 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r16 = dup2(r15, r14) ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0) r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r18 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r18, 0x5452, &(0x7f0000000040)) fcntl$getownex(r18, 0x10, &(0x7f0000000580)={0x0, 0x0}) r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r21, &(0x7f0000000140)=ANY=[], 0xfef0) r22 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000440)={'team0\x00'}) r23 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r23, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(r23, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/131, 0x3e1}], 0x6, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r22, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@dellink={0x70, 0x11, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r24, 0x400, 0x40204}, [@IFLA_NET_NS_PID={0x8, 0x13, r25}, @IFLA_EVENT={0x8, 0x2c, 0x5f}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x8bc}, @IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1f}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=r22, @ANYRESHEX=r11, @ANYRESDEC=r21], 0x8, 0x1) r26 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r26, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r27 = gettid() r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) waitid(0x83b895581628fca4, r28, &(0x7f0000000040), 0x8, &(0x7f0000000480)) sendmsg$key(r26, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r27]], 0xfffffffffffffe56}}, 0x20004850) r29 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r30 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r31 = dup2(r30, r29) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r31, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r32 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r32) r33 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r33, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r33, 0x227d, &(0x7f0000000780)) kcmp(r32, r27, 0x0, 0xffffffffffffffff, r33) ptrace$setopts(0x4206, r32, 0x0, 0x0) r34 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r32, r34, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r27, r31, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r12, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r11, r10, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r8, 0x0, 0x15, &(0x7f0000000000)='trusted@lo-{security\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r6, r7, 0x0, 0xd, &(0x7f00000007c0)='keyring^-proc', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x1, &(0x7f0000000040)='\x00', r35}, 0x30) ptrace$setregs(0xd, r1, 0x81000000, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:11:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:25 executing program 2: socketpair(0x14, 0xbe, 0x0, &(0x7f0000000140)) 01:11:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0xffff}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:25 executing program 2: socketpair(0x14, 0xbf, 0x0, &(0x7f0000000140)) 01:11:25 executing program 2: socketpair(0x14, 0xc0, 0x0, &(0x7f0000000140)) 01:11:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xf0000, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:34 executing program 2: socketpair(0x14, 0xc1, 0x0, &(0x7f0000000140)) 01:11:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = open(&(0x7f0000004500)='./file0\x00', 0x60480, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000180)={0x2, 0xf570, 0x20, 0x7fff, 0x4, 0x3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x21, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000680)={r7}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000000)={r7, 0x2c}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000004540)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x8}}, 0x2, 0x20}, &(0x7f0000004600)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000004640)=@sack_info={r9, 0x6, 0x9461}, 0xc) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x8000, 0x0) bind$bt_rfcomm(r10, &(0x7f00000000c0)={0x1f, {0x1, 0x43, 0x35, 0x1, 0x9}, 0x90}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r11) 01:11:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x1000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = dup3(r1, r2, 0x80000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)={0x40, 0x4000}) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) accept$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netpci0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @broadcast}, &(0x7f0000000380)=0xc) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r10, 0x5433, 0x0) recvmsg$can_raw(r10, &(0x7f0000001c00)={&(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/1, 0x1}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/225, 0xe1}, {&(0x7f00000019c0)=""/73, 0x49}, {&(0x7f0000001a40)=""/69, 0x45}, {&(0x7f0000001ac0)=""/9, 0x9}], 0x7, &(0x7f0000001b80)=""/126, 0x7e}, 0x4d62290ce866493a) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r14}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r15, 0x5433, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001c40)={'syz_tun\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003200)=0x14) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r20}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r23, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e4ffffffaad1932a"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000035c0)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003640)={0x0, @hci={0x1f, 0x0, 0x2}, @ax25={0x3, @default, 0x1}, @isdn={0x22, 0xa1, 0x9, 0xa9, 0x29}, 0x101, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003600)='teql0\x00', 0x8001, 0x1, 0x1}) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r27 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r27, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r28}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r31, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e4ffffffaad1932a"], 0x48}}, 0x0) accept4$packet(r3, &(0x7f0000003700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003740)=0x14, 0x130597c823f899ce) r33 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r34 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r34, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r35}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000003780)={@initdev, @initdev, 0x0}, &(0x7f00000037c0)=0xc) r37 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r37, 0x5433, 0x0) getsockopt$inet_pktinfo(r37, 0x0, 0x8, &(0x7f0000003800)={0x0, @remote, @empty}, &(0x7f0000003840)=0xc) r39 = socket$netlink(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r39, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r41, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e4ffffffaad1932a"], 0x48}}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000003c80)={0x0}, &(0x7f0000003cc0)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003dc0)={0x0, @loopback}, &(0x7f0000003e00)=0xc) r44 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r44, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r45 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r45, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r46}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) r47 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r47, 0x5433, 0x0) getpeername$packet(r47, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004200)=0x14) r49 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r49, 0x5433, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r49, 0x29, 0x22, &(0x7f0000004240)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004340)=0xe8) r51 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r51, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r51, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r52 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r51, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r52, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r53}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004380)={'vxcan0\x00', 0x0}) r55 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r55, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r55, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r56 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r55, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r56, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r57}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004bc0)={&(0x7f00000043c0)={0x7e4, r5, 0x0, 0x70bd28, 0x3, {}, [{{0x8, 0x1, r7}, {0xbc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r14}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r23}, {0x104, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r31}, {0x25c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r32}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf0}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r41}, {0x88, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r42}}}]}}, {{0x8, 0x1, r43}, {0xbc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf9}}, {0x8, 0x6, r46}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r48}}}]}}, {{0x8, 0x1, r50}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r53}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r54}}}]}}, {{0x8, 0x1, r57}, {0x8c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:11:34 executing program 2: socketpair(0x14, 0xc2, 0x0, &(0x7f0000000140)) 01:11:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) r3 = accept4$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10, 0x800) signalfd4(r3, &(0x7f00000000c0)={0x585}, 0x8, 0x75744853fed8c820) [ 691.902494][T22722] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:11:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 691.958431][T22722] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:11:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:34 executing program 2: socketpair(0x14, 0xc3, 0x0, &(0x7f0000000140)) 01:11:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:43 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0xff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0}) 01:11:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x28240) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x6, 0x800, [{0xfffffeff, 0x0, 0xff}, {0x1000, 0x0, 0x9}, {0x8, 0x0, 0x7}, {0x6, 0x0, 0xb24}, {0x8, 0x0, 0x80}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:11:43 executing program 2: socketpair(0x14, 0xc4, 0x0, &(0x7f0000000140)) 01:11:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:43 executing program 2: socketpair(0x14, 0xc5, 0x0, &(0x7f0000000140)) 01:11:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1000, 0x0) syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x9c35, 0x67a003) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00y', @ANYRES16=r7, @ANYBLOB="2b0400762600000000000100000000000000014100000018001700000000000000000a74683a6361696630000000"], 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x24000000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x8, 0x8) close(r2) 01:11:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ecb-twofish-avx,ghash-ce)\x00'}}}]}, 0x13c}}, 0x0) 01:11:44 executing program 2: socketpair(0x14, 0xc6, 0x0, &(0x7f0000000140)) [ 701.388374][T23284] x86/PAT: syz-executor.5:23284 map pfn RAM range req uncached-minus for [mem 0x3fd34000-0x3fd35fff], got write-back 01:11:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:11:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x240501, 0x0) close(r2) 01:11:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:53 executing program 2: socketpair(0x14, 0xc7, 0x0, &(0x7f0000000140)) 01:11:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}, {0x0}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r4, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) io_setup(0x3, &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = socket(0x10, 0x80002, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a0007000800000800005d14a4e91ee4380000", 0x39}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f0000000180)) dup3(r6, r5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 01:11:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:53 executing program 2: socketpair(0x14, 0xc8, 0x0, &(0x7f0000000140)) 01:11:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:11:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) close(r2) 01:11:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:11:53 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) 01:11:53 executing program 2: socketpair(0x14, 0xc9, 0x0, &(0x7f0000000140)) 01:12:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x3f00) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x220100, 0x0) close(r2) 01:12:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:02 executing program 2: socketpair(0x14, 0xca, 0x0, &(0x7f0000000140)) 01:12:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ecb-twofish-avx,ghash-ce)\x00'}}}, @tfcpad={0x8}]}, 0x144}}, 0x0) 01:12:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xf0}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:02 executing program 2: socketpair(0x14, 0xcb, 0x0, &(0x7f0000000140)) 01:12:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_TXQLEN={0x8}, @IFLA_XDP={0xc, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x217efe74b8fdbd4c}]}]}, 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in=@rand_addr=0x7, @in=@local, 0x4e24, 0x0, 0x4e24, 0x3, 0x8, 0x80, 0xa0, 0x2c, r6, r7}, {0xfffffffffffff08e, 0x5, 0x7, 0xc5d9, 0x7, 0x0, 0x10000, 0x80000001}, {0x3, 0x400, 0x2, 0x4}, 0x3, 0x6e6bb5, 0x0, 0x1, 0x1, 0x86c8cb75c1b70417}, {{@in6=@mcast1, 0x4d5, 0xff}, 0x2, @in=@empty, 0x3505, 0x1, 0x3, 0x4, 0x5, 0x1f, 0x8}}, 0xe8) close(r2) 01:12:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x02', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x392, 0x4) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) inotify_init1(0x0) getdents64(r2, &(0x7f0000000d00)=""/232, 0xe8) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{0x0}], 0x1, 0x0) 01:12:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:02 executing program 2: socketpair(0x14, 0xcc, 0x0, &(0x7f0000000140)) 01:12:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x4000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x300}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb7e3e5f44a11119b}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7fffffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:12:07 executing program 2: socketpair(0x14, 0xcd, 0x0, &(0x7f0000000140)) 01:12:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:07 executing program 4: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffb8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x101, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="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", 0xfc) r2 = open(0x0, 0x10000, 0x4c) getdents64(r2, &(0x7f00000001c0)=""/168, 0xa8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x10, &(0x7f0000000580)={&(0x7f0000000540)=""/8, 0x8}}, 0x10) r3 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000001c0)=""/168, 0xa8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x10, &(0x7f0000000580)={&(0x7f0000000540)=""/8, 0x8}}, 0x10) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r6 = socket(0xa, 0x1, 0x0) fstat(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket(0xa, 0x1, 0x0) fstat(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r7, r9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) r11 = socket(0xa, 0x1, 0x0) fstat(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r12) r13 = socket(0xa, 0x1, 0x0) fstat(r13, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r14) setregid(0x0, r14) r15 = getpgrp(0xffffffffffffffff) r16 = getpid() tkill(r16, 0x9) shmctl$IPC_SET(r3, 0x1, &(0x7f00000002c0)={{0x145e, r5, r7, r10, r12, 0x2}, 0x80000001, 0xffffffffffff8000, 0x0, 0x8, r15, r16, 0x6}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) memfd_create(0x0, 0x203) r17 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r17, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) 01:12:07 executing program 2: socketpair(0x14, 0xce, 0x0, &(0x7f0000000140)) [ 724.852747][T24378] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 01:12:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x500}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 724.901643][T24383] x86/PAT: syz-executor.5:24383 map pfn RAM range req uncached-minus for [mem 0x8d492000-0x8d493fff], got write-back 01:12:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsmount(r1, 0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8000, 0x0) close(r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1d8, 0x1d8, 0x0, 0x0, 0x1d8, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000000080), {[{{@ip={@loopback, @broadcast, 0xff, 0x1fffffffe, 'dummy0\x00', 'hwsim0\x00', {}, {0xff}, 0x67, 0x2, 0x946abb5e0bdb2d3d}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8001, 0x5, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e24}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0x1fe000000, 'ipddp0\x00', 'veth1_to_hsr\x00', {0x2bb44b5a0ff99525}, {}, 0xccd148644af9e234, 0x1, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7f, 0x6}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0x0, 'eql\x00', 'irlan0\x00', {0x1fe}, {0xff}, 0x2, 0x2, 0x29}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x5, [0x9, 0x7, 0x5, 0xff, 0x2, 0x8001], 0x0, 0x4}}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x27}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0x1, @broadcast, 0x4e20}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x587, 0x2, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1f}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d8) 01:12:07 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat(r1, 0x0, 0x51c0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) clock_gettime(0x4, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 01:12:07 executing program 2: socketpair(0x14, 0xcf, 0x0, &(0x7f0000000140)) 01:12:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xa00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0xa0fff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:16 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x256bb9d8e25cb3aa, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r5, 0x8b, "ee2460e84ed090008256b7c9b7820dc0c462e898f3b5d14e7f0d061470ccf4213018a05923c63c422a4d5fe89a3ec6fe5ef0e7adda1801f634c29d1fcac5b75fb9c09f7ad0bcbfaca0744d14207e02ed76b3f826daf911ba37ac8b007ca71ea3047ed43a820e60fb15ef6564ee5933fa73e580e9a88fd4337a2ddc87f938fa85bc6e995bac8300d5bbb25d"}, &(0x7f0000000000)=0x93) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r6) 01:12:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:16 executing program 2: socketpair(0x14, 0xd0, 0x0, &(0x7f0000000140)) 01:12:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xe00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:16 executing program 4: 01:12:16 executing program 4: 01:12:16 executing program 2: socketpair(0x14, 0xd1, 0x0, &(0x7f0000000140)) [ 734.174834][T24618] x86/PAT: syz-executor.5:24618 map pfn RAM range req uncached-minus for [mem 0x8160c000-0x8160dfff], got write-back 01:12:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xf00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x83, "42a9c9e45c30c8201fbcc664d3475d1ef07696955108fe53aba3485fbb891ae618ff6a795e26306dd7f1507c98ad51f5cefa769b7ea358281298211412c8d477c26938dfdd71bfd87d825c8f5f931c1723e9158cc693b8807dab94dbb319f921c0b4d2cbcec941084900d7fd7f24f1ba7dccaaf28eeb594b16223779d502a3bd8c2479"}, &(0x7f0000000000)=0x8b) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:12:17 executing program 4: 01:12:17 executing program 2: socketpair(0x14, 0xd2, 0x0, &(0x7f0000000140)) 01:12:26 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x400000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x3f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0xe09, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:12:26 executing program 4: 01:12:26 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:26 executing program 2: socketpair(0x14, 0xd3, 0x0, &(0x7f0000000140)) 01:12:26 executing program 4: 01:12:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r6, 0xf4, "b4dd8b57c7d6a0823e23d8ffd1e1a8e13a37270292de944e58d97a9ce3924aafae55547bd55f681c8881c569a5cb98f50504e5b40834ba17f9b710bdc1d6161ddeec537302f1502ebaa1f014997aa99180ea6686a7c09346b017c49dd59bc7cdc6747228bb8ce6b24e6bb6e6c8a9cd592fa177500549312e12e73534911d860df0d2315a3246554cb129f06934c3e5bf8a3ec0bff65e3f1cadffec32052bc721b885d565d684935e286a96fafcd06b0edc0d26becc89b871bb3cbe5e88ce3d6cc1abaf0edd13aa938a9407e9d3c8db2b039a8645c68f7194e6e73cc0a949f4ab3c977b5ace9fac"}, &(0x7f00000001c0)=0xef) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvra}\x00', 0xcc100, 0x0) close(r8) 01:12:26 executing program 2: socketpair(0x14, 0xd4, 0x0, &(0x7f0000000140)) 01:12:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x4000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:26 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:26 executing program 4: 01:12:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x60f91e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:33 executing program 2: socketpair(0x14, 0xd5, 0x0, &(0x7f0000000140)) 01:12:33 executing program 4: ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000080)=0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 01:12:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x6000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000001c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/4\x00') ioctl$TCSETX(r6, 0x5433, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x100, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xb) ioctl$SOUND_MIXER_READ_RECMASK(r7, 0x80044dfd, &(0x7f0000000240)) ioctl$VIDIOC_RESERVED(r6, 0x5601, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="000025bd7000fedbdf250c0000002c000900080002005e2d000008000200d3090000080001000008000008000200490000000800020006000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000800}, 0x2000c000) close(r4) 01:12:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:33 executing program 2: socketpair(0x14, 0xd6, 0x0, &(0x7f0000000140)) 01:12:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x7f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 750.649145][T24992] x86/PAT: syz-executor.5:24992 map pfn RAM range req uncached-minus for [mem 0x58aef000-0x58af0fff], got write-back 01:12:33 executing program 2: socketpair(0x14, 0xd7, 0x0, &(0x7f0000000140)) 01:12:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xf000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:33 executing program 2: socketpair(0x14, 0xd8, 0x0, &(0x7f0000000140)) 01:12:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0xffff}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x800000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:42 executing program 2: socketpair(0x14, 0xd9, 0x0, &(0x7f0000000140)) 01:12:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:42 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 01:12:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000240)=0x82) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = clone3(&(0x7f00000005c0)={0x20010000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000380), 0x20, 0x0, &(0x7f00000004c0)=""/108, 0x6c, &(0x7f0000000540)=""/58, &(0x7f0000000580)=[r3, r4, 0x0], 0x3}, 0x50) r6 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x39, 0xc1, 0x1, 0x41, 0x0, 0x4, 0x40000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0xf, @perf_bp={&(0x7f0000000000), 0x14}, 0xa11, 0x3004, 0x3, 0x0, 0x7f, 0xb86, 0xffff}, r5, 0x200000b, r2, 0x8) r7 = fcntl$dupfd(r6, 0x80c, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d06, &(0x7f00000002c0)) ioctl$BLKIOOPT(r7, 0x1279, &(0x7f0000000140)) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r9) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r10, 0x5433, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000400)=ANY=[@ANYRESHEX=r11]) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r13 = syz_open_procfs(r3, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r13, 0x5433, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r6, 0x0, 0x7, &(0x7f00000001c0)='bdev#+\x00'}, 0x30) r15 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r15, 0x5433, 0x0) r16 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r16, 0x800000c004500a, &(0x7f0000000300)) r17 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r17, 0x5433, 0x0) r18 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) poll(&(0x7f00000003c0)=[{r13, 0x8000}, {r14}, {r15, 0x4000}, {r0, 0x44}, {r16, 0x8000}, {r12, 0x2}, {r17, 0x20}, {r18, 0x3184}], 0x8, 0x4) ioctl$TCSETX(r12, 0x5433, 0x0) ioctl$TIOCSBRK(r12, 0x5427) 01:12:42 executing program 2: socketpair(0x14, 0xda, 0x0, &(0x7f0000000140)) 01:12:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xbc2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:12:42 executing program 2: socketpair(0x14, 0xdb, 0x0, &(0x7f0000000140)) 01:12:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x80f91e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = clone3(&(0x7f00000002c0)={0x200000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), 0x1d, 0x0, &(0x7f0000000100)=""/170, 0xaa, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=[r3, r4], 0x2}, 0x50) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000340)=r5) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0xb8, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0xdb}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x9, @rand_addr="8e5de43ff743af1b08207b4a088c2434", 0x7ff}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x81, @loopback, 0x9}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000540)={r7, 0x2c, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x7f, @local, 0x7}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000580)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r8) 01:12:49 executing program 2: socketpair(0x14, 0xdc, 0x0, &(0x7f0000000140)) 01:12:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:49 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe08, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e0000001a008102a00f80ecdb4cb9040a4800160b000000d4126e6a65f4e1403a7d0020e2000000180000000000", 0x2e}], 0x1}, 0x0) [ 767.086317][T25559] x86/PAT: syz-executor.5:25559 map pfn RAM range req uncached-minus for [mem 0x7d57b000-0x7d57cfff], got write-back 01:12:49 executing program 2: socketpair(0x14, 0xdd, 0x0, &(0x7f0000000140)) 01:12:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:49 executing program 2: socketpair(0x14, 0xde, 0x0, &(0x7f0000000140)) 01:12:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x50000000000, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000240007058000003242ed5408567c1abf", @ANYRES32=r1, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c00fd014c0002000800050000000000080002000000000008000500000000000800030600ecffff0700050000008100080004000000000008000200000000000800010000038000a802040000000000"], 0x7c}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:12:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:50 executing program 2: socketpair(0x14, 0xdf, 0x0, &(0x7f0000000140)) [ 767.346532][T25731] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:12:58 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x1000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:12:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:58 executing program 2: socketpair(0x14, 0xe0, 0x0, &(0x7f0000000140)) 01:12:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(r2) 01:12:58 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7fffffff}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x6, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f0000000080)={0x7fffffffffffff66}, &(0x7f0000a72ff0), 0x0, 0x8) 01:12:58 executing program 2: socketpair(0x14, 0xe1, 0x0, &(0x7f0000000140)) 01:12:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:12:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000580)=r6, 0x12) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa4ee027d8334c53c, 0x2812, r7, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ad, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r12}, 0x0) r13 = getpgid(0x0) r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r15 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r16 = dup2(r15, r14) ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0) r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r18 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r18, 0x5452, &(0x7f0000000040)) fcntl$getownex(r18, 0x10, &(0x7f0000000580)={0x0, 0x0}) r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r21, &(0x7f0000000140)=ANY=[], 0xfef0) r22 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000440)={'team0\x00'}) r23 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r23, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(r23, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/131, 0x3e1}], 0x6, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r22, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@dellink={0x70, 0x11, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r24, 0x400, 0x40204}, [@IFLA_NET_NS_PID={0x8, 0x13, r25}, @IFLA_EVENT={0x8, 0x2c, 0x5f}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x8bc}, @IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1f}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=r22, @ANYRESHEX=r11, @ANYRESDEC=r21], 0x8, 0x1) r26 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r26, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r27 = gettid() r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) waitid(0x83b895581628fca4, r28, &(0x7f0000000040), 0x8, &(0x7f0000000480)) sendmsg$key(r26, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r27]], 0xfffffffffffffe56}}, 0x20004850) r29 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r30 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r31 = dup2(r30, r29) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r31, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r32 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r32) r33 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r33, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r33, 0x227d, &(0x7f0000000780)) kcmp(r32, r27, 0x0, 0xffffffffffffffff, r33) ptrace$setopts(0x4206, r32, 0x0, 0x0) r34 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r32, r34, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r27, r31, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r12, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r35}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r35}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r11, r10, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r8, 0x0, 0x15, &(0x7f0000000000)='trusted@lo-{security\x00', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r6, r7, 0x0, 0xd, &(0x7f00000007c0)='keyring^-proc', r35}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x1, &(0x7f0000000040)='\x00', r35}, 0x30) ptrace$setregs(0xd, r1, 0x81000000, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 01:12:58 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:12:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:12:58 executing program 2: socketpair(0x14, 0xe2, 0x0, &(0x7f0000000140)) 01:13:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x2000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r4) 01:13:06 executing program 2: socketpair(0x14, 0xe3, 0x0, &(0x7f0000000140)) 01:13:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8100, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r3, 0x0, 0x40}, 0x8, 0x8}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001340)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r8, 0xffffffffffffffff}}) r9 = syz_open_dev$video4linux(&(0x7f0000001380)='/dev/v4l-subdev#\x00', 0x1, 0x20c401) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcsa\x00', 0x26200, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r13, 0xffffffffffffffff}}) pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff}, 0x80800) r15 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r15, 0x5433, 0x0) r16 = userfaultfd(0x100400) r17 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r17, 0x800000c004500a, &(0x7f0000000300)) r18 = getpid() sched_setscheduler(r18, 0x5, &(0x7f0000000380)) r19 = msgget$private(0x0, 0x0) msgsnd(r19, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r19, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r20, 0x0, 0x40}, 0x8, 0x8}) r21 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r22, 0xffffffffffffffff}}) r23 = getpgrp(0xffffffffffffffff) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r24, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r25, 0x0, 0x40}, 0x8, 0x8}) r26 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r27, 0xffffffffffffffff}}) r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) r29 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r29, 0x5433, 0x0) fstat(r29, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$midi(&(0x7f0000001980)='/dev/midi#\x00', 0x4, 0x88040) openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttynull\x00', 0x8000, 0x0) r32 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r32, 0x800000c004500a, &(0x7f0000000300)) r33 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r33, 0x800000c004500a, &(0x7f0000000300)) r34 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r35 = openat$cgroup_procs(r34, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r36 = gettid() write$cgroup_pid(r35, &(0x7f0000000580)=r36, 0x12) r37 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa4ee027d8334c53c, 0x2812, r37, 0x0) r38 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ad, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, r38, 0x0) r39 = getpid() sched_setscheduler(r39, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r41 = getpid() sched_setscheduler(r41, 0x5, &(0x7f0000000380)) r42 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r42}, 0x0) r43 = getpgid(0x0) r44 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r45 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r46 = dup2(r45, r44) ppoll(&(0x7f0000000200)=[{r46}], 0x1, &(0x7f0000000280), 0x0, 0x0) r47 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r48 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r48, 0x5452, &(0x7f0000000040)) fcntl$getownex(r48, 0x10, &(0x7f0000000580)={0x0, 0x0}) r50 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r51, &(0x7f0000000140)=ANY=[], 0xfef0) r52 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r52, 0x8933, &(0x7f0000000440)={'team0\x00'}) r53 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r53, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(r53, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/131, 0x3e1}], 0x6, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r52, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@dellink={0x70, 0x11, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r54, 0x400, 0x40204}, [@IFLA_NET_NS_PID={0x8, 0x13, r55}, @IFLA_EVENT={0x8, 0x2c, 0x5f}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x8bc}, @IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1f}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r50, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=r52, @ANYRESHEX=r41, @ANYRESDEC=r51], 0x8, 0x1) r56 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r56, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r56, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r57 = gettid() waitid(0x83b895581628fca4, r57, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r56, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r57]], 0xfffffffffffffe56}}, 0x20004850) r58 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r59 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r60 = dup2(r59, r58) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r60, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r61 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r61) r62 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r62, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r62, 0x227d, &(0x7f0000000780)) kcmp(r61, r57, 0x0, 0xffffffffffffffff, r62) ptrace$setopts(0x4206, r61, 0x0, 0x0) r63 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r61, r63, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r57, r60, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r49, r50, 0x0, 0x1, &(0x7f0000000080)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r47, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r43, r46, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r42, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r41, r40, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r39, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r38, 0x0, 0x15, &(0x7f0000000000)='trusted@lo-{security\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r36, r37, 0x0, 0xd, &(0x7f00000007c0)='keyring^-proc', r64}, 0x30) r65 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a00)={r64}, 0xc) r66 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r66, 0x5433, 0x0) r67 = syz_open_dev$admmidi(&(0x7f0000001a40)='/dev/admmidi#\x00', 0xffff, 0xc0) r68 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/capi20\x00', 0x7040, 0x0) r69 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r69, 0x800000c004500a, &(0x7f0000000300)) r70 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r70, 0x800000c004500a, &(0x7f0000000300)) r71 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r71, 0x800000c004500a, &(0x7f0000000300)) signalfd4(r71, &(0x7f0000001ac0)={0x97b0}, 0x8, 0x1800) r72 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r72, 0x5433, 0x0) r73 = msgget$private(0x0, 0x0) msgsnd(r73, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r73, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r74, 0x0, 0x40}, 0x8, 0x8}) sendmmsg$unix(r1, &(0x7f0000001c40)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="e3ba0203fdd269ed7a5c3ca0df5c01bf6b1ac1c8ecc9418f6a06620504b58a7421dbbc548663bc4171cd6fd6", 0x2c}, {&(0x7f00000002c0)="fa889ba13e3a104c9b83f96850aab94c9422bcc6b7c3bc6ba07b9546ecd4c0e7edcb374ee8bd0be173b81779141502884fba610fb4616be28871f40a8e1362030af734991512005ba116d9c287c457f50b41f747addebcca4eb6ac833558567faabddbb94b80204951e338d7c9b7c10fdb2e60954f65d123d7cc8dcb9bef3ff3187e7de7fa50b4e84cdc75afa738820d859357fa81cc6077ff48176c2e0db738d90c420827f7a3165537a576766b7a60c3d7f538fe6f7977ff1d365919c322fcd1afed271cb42868ccb7ad62c37660d214aedf1437369454d83210ed930a5eb89b78421a93f80ca5bf59cbc3e4557a37904ee889b4faae58b0df7b107c68f6e5d476961c3085e632c6761dd0be81abd716daaf022667044f3b7494d6871ad96f1ae646d2ea9cd801f60e30a7d1f74fb5051f3b98f1f3d0472c4e5503d61912f143748b9a50f51d0d7e8fd569393ff431269f6cc064f523b44fe6b26f380198d3e2100419b57d6f1be3f26454dffd79a073f99e1032be9c642d920cf6dbe430831d97045c7d9de561a120333dec4409c69f1a5159ecb544312e0e1363fdcceed993201bd113491e0f579900abcf65ae34ed656a97a870a3f13d96b85423c869722a85c228f8b90f7f139eae8bf109631758e1072ce9805c768de48c267a258d8e3c45c5572c7b2d719eebcf22db78638bb3272566d272ed39fd6762d1047f376d40286d7e46442fdb856c6cb6589bdce2ba7d36ac7eea6d48a022dd2721d321101a90cd0af5dc37571f09b2137c932a0553d5e94acfbc05c67c534ad0872df80e211fe00384bb3460b132b15a088ca387121e30e021b3b25f7e4bfeac252620eebac140aafa7542bf37494f021af14e2df69ed7bcdc71e80f96793950289fe5676cab4786cd3d9f101c440c200cde6d7f3d7fa7b8bde87f6dd3962ac2514e4814bed4b4676bec10e64708d09b2754c1fa1b8b67c9afd0136cc5031c350425e558f2c91eb518c8b9f5d5756e820be4d744a18b1a118ecadce74ba06a497a30fd7c96d5c9017d9d68a9520293345ffd321221933f46248df32cb9b657fd3093b03c98f52f4c5e76884270a2ddd93d7fe0fb4536606beec0bb2ef9bbc6857a7b98ae91a8a45261a7523aff4e85a19d82a635bffaa40441893010892ff6461ddb4bc67e95f07c42db62c41f48172f250165885d09a995fd3313e4402d432ec3fe7177fda93a606507e678d59b1cbd2ed0fd37c969c46712ffc47d33cc20d61df36169143d70c158b572df1ec6200a487855eb86a74339799d85cc5f7248e2391ecfb0f3c91af7aedbf6fefda9ff640145806eb32a94195d8fa160cdfa77089cbf28a40a1fa41c461eebf75f2a58fc337dc6585290d95174b52de788e16c4a673c68f5dca6e797af742b7d077fde568e84f79c97e82eb5b7c2cf96b7656591014ed6c6333d645390429d4ac6ba622762dec79ea2028dd7bc0267c5d929f700a1a6f20a80075e5925fd40cfcda747b78ede93f09098d48dd2be1ee01e8c7500c62b10e27a8451d1806efbcffb5952d2be8167feeda3fcc2ee2f14602b821a1caf5d6fa6b1ca88f0d92c0e9851ace49ccaa0e02cf53355b94bd34f869bb3c33e904fe118c79674b9434956e487e6df9c6a47f9b43efd87407e5d7bee336897a8384086760b66aac7f4aefe37ff10cd506edda5e2cf24a93bab603a744afc56248a21343a30f4d48f8e9f4ed9a91cfd92faebed1f42e1dc818e2f2e8170997a819c19e533049916a68e14c54a2b95027828d4bca675835fa5802fe2ff1431412fa5d698b5704b4f9aa2c8a8179e87008ce5c348f2529b061423a4af624ee3f0664d4837ba67c1b8a5a076f73c3a48ac03e579eb93969b19ed2301e48c6f37f1c1e78c5a29c55a99522b3a6871e2b1c1d4fdf93d3276bacb765f739bb585535683666fbefff31def5a3877728503085c579b8f58b4dc113677b1945b085417315e17624e72d49985b7609e0d4fd4205561c03685a0126c9bb643745ae0147d2cfd77b50e774a2f79ca1be1219b374b98bca99ec9e380b4fca8fa08933e64423f904fe054a28b09840f4391d9101066ba84f58858fda4f45be68e521c82a5c9f31a865c54015db3a33437000f4c4891a4c2f9f1046bda47d2904414e024bc74773c96f884b06f8f7a0d81762de0a81396427526454be00564ac2a4428761216909d4c0e675312f6b74c330e9b0e8ca7df24e414a0894a41122c5bcd5e801ea792133f4e6fc73a7e33c9614e7fec0b4e8e7f46df28f111f40f5014fbd11fd64842c322d4c0716fdb0d5bb9fcbe616fe87bb9622e0e610180f4ac5ca03d4caffa09fdfe8d9ad9bc3b6b5b74f16428b09bcec03cab52de0aa92758757f7e2bdc49211b8cd0190024643e1c253e4455396650eb7fdfb4fb1a47f168fa30414d1e5167471a18447aae09a5d5d409a0e4ea49df0930300d49d6e1c3d0e2931874c4d4a44ad4d6a0209419ae9f30e437a46885665d62801193fee4f32291b2ef42b5df39dc0380680fd2850ec73e424be0358ac5e6193cdb53d419ca266ebceb78dcfe382064a9617540b594f34b781dd2920fa98b88392eaa35ee78457b61900ba707287b3dc947a52361e7a14121178a15211fbbe7fbf4e44b9a23b3f9444d931e4d7d3456de94993d618eb218bd1270a7d7d528866bc6120c75ef31ff685f0d45604ec8019ae87622ba26952354dd78955bfdef77ea213074d5288e5d597ed460a25db64c97d51838a4fb5392def061dd9e1e1e15ca028fbaefda9d90c1f3caa990eab65b3ddea7180aa12ae06db644567aa803d672cd208ce480576a2f12f4fc1ca8f76b7fa2e1e35c99246ef0e2ed95193564815a76b28c30cff1148ac44b229582de1370f75cc278af0f03b34e268e4d9ce27acc64e9c4ce2d09cfd180af23741a15c76edf675d58280db848ccfcde97822da8bda6056a9b9b224668fac29b862a2fe8dc3b8b5ed822af468baed99c4cca226d423521ecf6f12cb52146d4fe8d5db6b46cab6373c5a8a42a2724f6a7b48ff25a9b2a759fa20db9f64134258738752237eebfd909c4c2233f9a76ebb4248433dca22433b734e6816281d4fc1f276f3d3de6b15bafa79f8adddc468922ee21a3967589e60c48f4104e64fdc6a9206141f3d53b716ac84b939a4e2363b224494de4699ee0280db7fecb1db9653f5f78a690704b895bf740f548ce58c290cbdde5a2be5eac8a0bb40fa3ec1cbf37b735c2349b5a9a16cb4cf42f58e0feb2728101bdc76c12a3b3e0a93f45016c77f595b7fbbe4613f26aa4021370b66af9027e4b45d4b8b54820290ba0d0bc90d083e1570349dd3b1f183bcc077d0c634802e38daff96f397051fab46236cd63b8d628cda3d55107a7fbbe306e00027c5ec47377f28fc0807d3dec1661159f00f4dfd5f49cbb116a2a339558321413c63430c4fe5c6698f4c7810a3e84cfa61ef3dda0c1fd244747949fd627a37a0cea1d3ee3563931cafcf5d25b98ce2a7064d7a02378812b0fc7489bfb0dce61d4a59e7f49e8acb9e748e75af94afbf95b68c301ed4be7cddfc19a4ea2db52a9954ec13d4eef90b1a1c05f83859d4fc7a2b864ed82297c77d69650865f46ed934efa5e55d54a8d372a158af168dcb62323898e9c29dc3f9c6f851d44dec016f58a57e720f86c29c9ded3f772c10e322565b287a1f9eacbe8b59c11e24497fc83be52aa06e763b179fc6a6bee095057ccc82ef8cae1f6fea75531b11f60fe68b05d5bb155b9a39a08be16d6d4048d01efb025f079d93be5d1f71ed9a54ba45e2d117d97770c7db143c17b06c656dcc02dd7af4c5f5facdb97f1f6cdea3151c933a8436abd000d033246343e86cb8b49e94e0a777bf497c2e5953dc29d7785bff221171867927e13aba0ae6a5554f24e02865bde13a181d66c92f10ca97d38e572e5108c4834c9ee0c0096f581d0055c27a5b576307a8bd6420d5067fe0e627a9550c4a78690189f065ee2df4597aeaaeb5af71ac096c820c9a895ddd584032bd987d5aed7e90e45dd7c9792d543a9ded05bc9b75fc789dc75523aca37680add8ae7f57d64869ca8299540a7c5f1e8841843f509dfc81cfe0b141335b8e339a937ca7aa17acc9ebe6abaf8e592c9a043691dd551470cb462e11bb1817ad617feb75aa9286fc51e0f9e87403f02b1ec751bbee10179ce0fc78f7ee09442925d59cd901fb130ec0fa64bd16248c89f938797976119938ba3e25539ed2ffcb63a8c4c65adceebf2e7278365127bafb4d89a5ef315f6ed5b2f392516cae200ae860662c9bb8ca212fde76f605a7216e802088c91d8ed2c0a32ee36549436cca974806912c2f45a86b4bda13f0323c397dc8deaf92865cafe1143afcda67dda53650f7f90f87764a84382071190efd62080fc87414ad69b23d1db249e17e635b09552741f1d07064f583b7e36b2be50d5b7d17f434ce2008e03137ec0e6c6070cde7bd212a24adf2a565429219e049e94995dccc15817ca560b3b2defd73dc453e096cdc004f54ab3367e40b412234389093d636ae14a22599007c53a99228499ad6f336e69e8e9dd8088c3f9eacf9e92e92921fb89ea9227ebb6fb7d8382a9c60744e4f348b7d23625aca16c0fc1348ab7293c725626a726d8b91ea13eb8c6531306abdc8b8d026b0c72fba11c9038dc6fb3de11161bec4fed95d9662d44a467b135b1cffb96ee390e64346a921b0257f25dcf73893de8f1499952de02a19b4856cfae01128ff84912bde35e38fbd2cda26896db6e0c18e67faf15f81e3a6c0f05f3e297cd930b6512dddcbb9498b73b0dbdf829964d8292269a49cf9eb0ccb34f4c2244ead372182e0971619f2c5eb5b7c9d5ca2d62e0a84a1ffcbefe7489a1c072e4a16f3001d99be9b7c482ad806d31b0f1977864bcd390abd07b7f4a8b4d66932458e845d1be01b99c06e25f136c1dc6b3287848b006dc8c9cd62fa2b3d83b21f39b9d03b631e55571f462154b490a7161ba448fc3879807c752ed8a984b886f84e59ac5ebc63676415ee04069b3c92fc58dde055b11339cf0dc355e2295353c44fdc24607fbf538663baef6e438ef49cc13e98f22911c639e21998fd13ce33fc27c427530d019cdfe655ab15674e2b5c3c4f800ea278238d4ad4038aa58d404315267111e16cdee106f6b35226e189284bb85fa9d3d53483171f260412bbb76d0ba1df0d4364fc7da4cf36147a94039464aaab5d1845bddd717df7a7fc3c5365ace41920a242b52308daed595099e47b42f780a53d2b5c088ceabb75d16c0a5d00e9e7eb4140f0ee28239cf20431fe6d7713ae8d3d4d1807982cde96bf1e7f0d955735772065a06ad3bdacd374d3507e24bb36759c26c1245493126682ce0d83266af8f43f905d9bbda763013a188ebda6530bd1f7bcefcb1da8064d91723fc9d2e75c7e3dc9af696dbabd4f00cbf5638cde7556df3b2f1b5eabe57bcec7cd43c15cabcc5473ebdd0aee2cd19896620b119a3ea9b0889386e3c1d2105697a8e924e51fa6cf7997ed9f03d7814190cb215476d53600baba7543eb4109dd4a4ca6180517334aba287b3c48cf4b834888be959f806e21ecfa2a6ddee8ea99e79ef3b59daa2fee4423e3b0f13b147212c5c11c8da5a7889d3404b4fc71ae59bfd80df82c2847066b0917c1d6762f36ad4b8ce665c2010daaf58de803306826f90422bc144ac0001de43e219ae2b9f23bbbcba06b75400bd2657c4abaf636ff7c019a9527cb441f5ab24d6c8f6b2949adcd26faacb6c62d3a5d6543a25", 0x1000}, {&(0x7f0000000180)="35ad44c2ab017b20356a02933994d0f7ddd625157626cdbf6837ccc57d5fac2c2eb3f2d5d19e87524923e518ff09a1c65dde8e81a48e435e4e0510be387b19a2f9eb054cdf8eb1d27fca964f7d87d4ce993f1c7054ad0c9f938a5a0e4f600e495551afd88e754f554412e3023498488c1d70de4b0f7305510f40", 0xfffffffffffffffb}], 0x3, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r74, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}], 0x58, 0x20024860}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001500)="68f4e636f37674545652953cc60a0b32d2310cc0b1aa4a73d6d7bca68c3344ccea12c01927e207d9b2d14c221f53a1a11efef071aea85a4de9e0a26c1dc3d1b252f3c03c33d3df617572fdb27463175e4810aca9ac0ea8241e9df27896c5a0139511b377bb250612af6a9f08bfb38fe3ea0e137888a2db3d485ed45187fc", 0x7e}, {&(0x7f0000001580)="57ea027def3d062856c93ad640c4daed069a5db52fe4f93d876622521348c8da77d58d14cb90b8c50834798ad90dbbe5da0be7eacf1d4290d1de1dd653810e83484c43c5828cfe5c0497612e2963cff98c4065999d93a69fe49753b7c2a1561a0bcfb96abbf8232679385917189c988a3b52716d287dcdc669228d9e915773ac866341c3b40dc5bb46fcc586597e25", 0x8f}, {&(0x7f0000001640)="2624f07e087745174ca9d2905f0eaf769c0e722f2147beadb8846649ab7c18278aeedf8348bfb99b23d7a7f24ebf92c9c2523605b2d79a2bd10af4420bd72880e9b0617c2e0af56aeedd942e3a4fa740f642f5eb1773b074cf483af8a34a1e5d95c5021496fa566c48cf2f2554c3463e6bce2f1c3749a947a7a9cd597b0d3246e7729b301419ac3c01d5ff9d982a", 0x8e}, {&(0x7f0000001700)="6f6184413ca4dc20f4de0010b7ad3e9e19b2121f", 0x14}], 0x4, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r0, r11, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r15, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r20, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r25, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r30, r31}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r33, r65, r66, r67, r68, r69]}}, @rights={{0x10}}], 0xe8, 0x10}], 0x0, 0x24000400) 01:13:06 executing program 2: socketpair(0x14, 0xe4, 0x0, &(0x7f0000000140)) 01:13:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xf0}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0x0, 0x3, {0x80000000}}, 0x18) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) [ 783.887238][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 783.893234][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:13:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:06 executing program 2: socketpair(0x14, 0xe5, 0x0, &(0x7f0000000140)) [ 783.967228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 783.973238][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:13:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x300}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 784.066278][T26356] x86/PAT: syz-executor.5:26356 map pfn RAM range req uncached-minus for [mem 0x8e807000-0x8e808fff], got write-back 01:13:13 executing program 2: socketpair(0x14, 0xe6, 0x0, &(0x7f0000000140)) 01:13:13 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0xc5f]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:13:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:13:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x10000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1ff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x500}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:13 executing program 2: socketpair(0x14, 0xe7, 0x0, &(0x7f0000000140)) 01:13:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xa00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:13 executing program 2: socketpair(0x14, 0xe8, 0x0, &(0x7f0000000140)) 01:13:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:13:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xe00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:14 executing program 2: socketpair(0x14, 0xe9, 0x0, &(0x7f0000000140)) 01:13:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x1ef96000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 01:13:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x10000, 0x3, 0x101}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000001c0)=0x1) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000000)=0x54) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r5) 01:13:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xf00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:20 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x90ed00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:20 executing program 2: socketpair(0x14, 0xea, 0x0, &(0x7f0000000140)) 01:13:21 executing program 2: socketpair(0x14, 0xeb, 0x0, &(0x7f0000000140)) 01:13:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x3f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x9e1c0102a78d0f67, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x486480, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x112) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000000c0)={0x8001, 0x5, 0x6, 0x200, 0x58, 0x6}) close(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x54) ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10003}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x5, r6, 0x10000, 0x4}) 01:13:21 executing program 2: socketpair(0x14, 0xec, 0x0, &(0x7f0000000140)) 01:13:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x4000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 798.447245][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 798.453079][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:13:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xc0681e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 798.527231][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 798.533107][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:13:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x1ef98000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x6000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0xc0a, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r2) 01:13:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 01:13:30 executing program 2: socketpair(0x14, 0xed, 0x0, &(0x7f0000000140)) 01:13:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xed9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:30 executing program 2: socketpair(0x14, 0xee, 0x0, &(0x7f0000000140)) 01:13:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xf01f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x7f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200000, 0x0) renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0/file0\x00', 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r10, 0x7, 0x30}, &(0x7f0000000280)=0xc) ioctl$TCSETX(r7, 0x5433, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x18, r12, 0x130, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10201008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x1b0, r12, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @rand_addr="ad184dee37bc9dfa0d51d4d2a6e41ebf", 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x574}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2000010}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x4) close(0xffffffffffffffff) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r13, 0x5433, 0x0) ioctl$PPPIOCGL2TPSTATS(r13, 0x80487436, &(0x7f0000000500)="712c40f4113feb79204969c66d0ead0faddf26f8b5559d8861c099a4f771d22b36053b565f2b12ad1be3772ed58a4bce83f22dc325a74d2e869bb1fa42695cad7b8618f18020872d3fd4b184e6ba421b3105f72c23bdf9f6f4b4ef5826909ddb2c2e2b5abb7cdf7f5b3a0cbd05fc2ae2b252645d20a71fabba") 01:13:30 executing program 2: socketpair(0x14, 0xef, 0x0, &(0x7f0000000140)) 01:13:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 01:13:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x3f000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xf000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:36 executing program 2: socketpair(0x14, 0xf0, 0x0, &(0x7f0000000140)) 01:13:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000080)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:13:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 01:13:36 executing program 2: socketpair(0x14, 0xf1, 0x0, &(0x7f0000000140)) [ 813.962671][T27604] x86/PAT: syz-executor.5:27604 map pfn RAM range req uncached-minus for [mem 0x3f55c000-0x3f55dfff], got write-back 01:13:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0xffff}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) 01:13:36 executing program 2: socketpair(0x14, 0xf2, 0x0, &(0x7f0000000140)) 01:13:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 814.417668][T27724] x86/PAT: syz-executor.5:27724 map pfn RAM range req uncached-minus for [mem 0x8d895000-0x8d896fff], got write-back 01:13:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x40000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 01:13:45 executing program 2: socketpair(0x14, 0xf3, 0x0, &(0x7f0000000140)) 01:13:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = fcntl$dupfd(r0, 0xc0a, r0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:13:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 823.156129][T27836] x86/PAT: syz-executor.5:27836 map pfn RAM range req uncached-minus for [mem 0x3f53c000-0x3f53dfff], got write-back 01:13:45 executing program 2: socketpair(0x14, 0xf4, 0x0, &(0x7f0000000140)) 01:13:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280, 0x0) r1 = socket(0x3, 0x80000, 0x80) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2, 0x2}, 0x11c) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffc0, 0x20000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:13:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 01:13:46 executing program 2: socketpair(0x14, 0xf5, 0x0, &(0x7f0000000140)) 01:13:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0xff0f0a00) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:13:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000080)={r7, 0x6f, "16fa5ba97f8a865270b9349eb3ba2e5cb64cae61635d64ad482a584fc85621298711c02f307f2bfdb44637b54dfc6f1235663639c203c21fbce8f84651a741750909357a30edbf5829db8e1b36013f8a0211acb9839199bf5703ccd69f596febf919010965fc84940e0d0658813d1c"}, &(0x7f0000000000)=0x77) close(r2) 01:13:55 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:13:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:13:55 executing program 2: socketpair(0x14, 0xf6, 0x0, &(0x7f0000000140)) 01:13:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:13:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 832.475785][T28181] x86/PAT: syz-executor.5:28181 map pfn RAM range req uncached-minus for [mem 0x3f50c000-0x3f50dfff], got write-back 01:13:55 executing program 2: socketpair(0x14, 0xf7, 0x0, &(0x7f0000000140)) 01:13:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:13:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:13:55 executing program 2: socketpair(0x14, 0xf8, 0x0, &(0x7f0000000140)) 01:13:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x400000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/\\^\x8a)\x98\x93\x05f;\x00', 0x100, 0x0) close(r2) 01:14:04 executing program 2: socketpair(0x14, 0xf9, 0x0, &(0x7f0000000140)) 01:14:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:14:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:04 executing program 2: socketpair(0x14, 0xfa, 0x0, &(0x7f0000000140)) 01:14:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 841.764025][T28321] x86/PAT: syz-executor.5:28321 map pfn RAM range req uncached-minus for [mem 0x8c0b3000-0x8c0b4fff], got write-back 01:14:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) close(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000080)={0x4, "c5fd89cc9f714d3b8f7806dc87d95e7a229ae23361514bfb848422a9313f13f4", 0x2, 0x80, 0x0, 0x80, 0x8, 0x41864cd4a106f516, 0x4, 0x38ea}) 01:14:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 01:14:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xf0}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 01:14:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0xffffffffffffd) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:13 executing program 2: socketpair(0x14, 0xfb, 0x0, &(0x7f0000000140)) 01:14:13 executing program 3: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) 01:14:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x300}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 01:14:13 executing program 2: socketpair(0x14, 0xfc, 0x0, &(0x7f0000000140)) 01:14:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x500}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 851.043632][T28458] x86/PAT: syz-executor.5:28458 map pfn RAM range req uncached-minus for [mem 0x741ed000-0x741eefff], got write-back 01:14:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:14 executing program 2: socketpair(0x14, 0xfd, 0x0, &(0x7f0000000140)) 01:14:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 851.373106][T28578] x86/PAT: syz-executor.5:28578 map pfn RAM range req uncached-minus for [mem 0x3f51b000-0x3f51cfff], got write-back 01:14:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x60f91e00000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xa00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:22 executing program 2: socketpair(0x14, 0xfe, 0x0, &(0x7f0000000140)) 01:14:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000500)='cpuacct.usage_user\x00', 0x2761, 0x0) 01:14:23 executing program 2: socketpair(0x14, 0x102, 0x0, &(0x7f0000000140)) [ 860.288790][T28702] x86/PAT: syz-executor.5:28702 map pfn RAM range req uncached-minus for [mem 0x8b020000-0x8b021fff], got write-back 01:14:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xe00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:23 executing program 2: socketpair(0x14, 0x103, 0x0, &(0x7f0000000140)) 01:14:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3, 0x5, 0x2, 0x8000, 0x2, [{0x7fff, 0x6, 0x9, 0x0, 0x0, 0x88}, {0xd99, 0x61c8, 0x6, 0x0, 0x0, 0x240}]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003ac0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000080)='\v', 0x1}], 0x1}], 0x1, 0x0) 01:14:23 executing program 2: socketpair(0x14, 0x104, 0x0, &(0x7f0000000140)) 01:14:29 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x80000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xf00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:14:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {0x0, 0xc8}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xc7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 01:14:29 executing program 2: socketpair(0x14, 0x105, 0x0, &(0x7f0000000140)) 01:14:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x3f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 866.585233][T28841] x86/PAT: syz-executor.5:28841 map pfn RAM range req uncached-minus for [mem 0x77474000-0x77475fff], got write-back 01:14:29 executing program 2: socketpair(0x14, 0x106, 0x0, &(0x7f0000000140)) 01:14:29 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:14:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x4000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:29 executing program 2: socketpair(0x14, 0x107, 0x0, &(0x7f0000000140)) 01:14:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {0x0, 0xc8}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xc7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 01:14:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x80f91e00000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:38 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:14:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x6000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:38 executing program 2: socketpair(0x14, 0x108, 0x0, &(0x7f0000000140)) 01:14:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:38 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0xfffffffe}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) 01:14:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x7f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:38 executing program 2: socketpair(0x14, 0x109, 0x0, &(0x7f0000000140)) [ 875.835554][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 875.835568][ T27] audit: type=1326 audit(1576631678.549:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28976 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0xffff0000 01:14:38 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:14:38 executing program 2: socketpair(0x14, 0x10a, 0x0, &(0x7f0000000140)) 01:14:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xf000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 876.624547][ T27] audit: type=1326 audit(1576631679.339:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28976 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d75a code=0xffff0000 01:14:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x100000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:14:43 executing program 2: socketpair(0x14, 0x10b, 0x0, &(0x7f0000000140)) 01:14:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0xffff}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1e68c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:43 executing program 2: socketpair(0x14, 0x10c, 0x0, &(0x7f0000000140)) [ 881.049755][T29216] x86/PAT: syz-executor.3:29216 map pfn RAM range req uncached-minus for [mem 0x46717000-0x46718fff], got write-back 01:14:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:43 executing program 2: socketpair(0x14, 0x10d, 0x0, &(0x7f0000000140)) 01:14:44 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8100, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r3, 0x0, 0x40}, 0x8, 0x8}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001340)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r8, 0xffffffffffffffff}}) r9 = syz_open_dev$video4linux(&(0x7f0000001380)='/dev/v4l-subdev#\x00', 0x1, 0x20c401) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcsa\x00', 0x26200, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r13, 0xffffffffffffffff}}) pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff}, 0x80800) r15 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r15, 0x5433, 0x0) r16 = userfaultfd(0x100400) r17 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r17, 0x800000c004500a, &(0x7f0000000300)) r18 = getpid() sched_setscheduler(r18, 0x5, &(0x7f0000000380)) r19 = msgget$private(0x0, 0x0) msgsnd(r19, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r19, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r20, 0x0, 0x40}, 0x8, 0x8}) r21 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r22, 0xffffffffffffffff}}) r23 = getpgrp(0xffffffffffffffff) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r24, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r25, 0x0, 0x40}, 0x8, 0x8}) r26 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r27, 0xffffffffffffffff}}) r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) r29 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r29, 0x5433, 0x0) fstat(r29, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$midi(&(0x7f0000001980)='/dev/midi#\x00', 0x4, 0x88040) openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttynull\x00', 0x8000, 0x0) r32 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r32, 0x800000c004500a, &(0x7f0000000300)) r33 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r33, 0x800000c004500a, &(0x7f0000000300)) r34 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r35 = openat$cgroup_procs(r34, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r36 = gettid() write$cgroup_pid(r35, &(0x7f0000000580)=r36, 0x12) r37 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa4ee027d8334c53c, 0x2812, r37, 0x0) r38 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ad, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, r38, 0x0) r39 = getpid() sched_setscheduler(r39, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r41 = getpid() sched_setscheduler(r41, 0x5, &(0x7f0000000380)) r42 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r42}, 0x0) r43 = getpgid(0x0) r44 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r45 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r46 = dup2(r45, r44) ppoll(&(0x7f0000000200)=[{r46}], 0x1, &(0x7f0000000280), 0x0, 0x0) r47 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r48 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r48, 0x5452, &(0x7f0000000040)) fcntl$getownex(r48, 0x10, &(0x7f0000000580)={0x0, 0x0}) r50 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r51, &(0x7f0000000140)=ANY=[], 0xfef0) r52 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r52, 0x8933, &(0x7f0000000440)={'team0\x00'}) r53 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(r53, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(r53, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/131, 0x3e1}], 0x6, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r52, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@dellink={0x70, 0x11, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r54, 0x400, 0x40204}, [@IFLA_NET_NS_PID={0x8, 0x13, r55}, @IFLA_EVENT={0x8, 0x2c, 0x5f}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x9, 0x8bc}, @IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1f}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x8}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r50, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=r52, @ANYRESHEX=r41, @ANYRESDEC=r51], 0x8, 0x1) r56 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r56, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r56, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r57 = gettid() waitid(0x83b895581628fca4, r57, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r56, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r57]], 0xfffffffffffffe56}}, 0x20004850) r58 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r59 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r60 = dup2(r59, r58) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r60, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r61 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r61) r62 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r62, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r62, 0x227d, &(0x7f0000000780)) kcmp(r61, r57, 0x0, 0xffffffffffffffff, r62) ptrace$setopts(0x4206, r61, 0x0, 0x0) r63 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r61, r63, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r57, r60, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r49, r50, 0x0, 0x1, &(0x7f0000000080)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r47, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r43, r46, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r42, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r64}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r64}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r41, r40, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r39, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r38, 0x0, 0x15, &(0x7f0000000000)='trusted@lo-{security\x00', r64}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r36, r37, 0x0, 0xd, &(0x7f00000007c0)='keyring^-proc', r64}, 0x30) r65 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a00)={r64}, 0xc) r66 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r66, 0x5433, 0x0) r67 = syz_open_dev$admmidi(&(0x7f0000001a40)='/dev/admmidi#\x00', 0xffff, 0xc0) r68 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/capi20\x00', 0x7040, 0x0) r69 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r69, 0x800000c004500a, &(0x7f0000000300)) r70 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r70, 0x800000c004500a, &(0x7f0000000300)) r71 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r71, 0x800000c004500a, &(0x7f0000000300)) signalfd4(r71, &(0x7f0000001ac0)={0x97b0}, 0x8, 0x1800) r72 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r72, 0x5433, 0x0) r73 = msgget$private(0x0, 0x0) msgsnd(r73, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x1, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000640)=0x0, 0x0) msgctl$IPC_SET(r73, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r74, 0x0, 0x40}, 0x8, 0x8}) sendmmsg$unix(r1, &(0x7f0000001c40)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="e3ba0203fdd269ed7a5c3ca0df5c01bf6b1ac1c8ecc9418f6a06620504b58a7421dbbc548663bc4171cd6fd6", 0x2c}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000180)="35ad44c2ab017b20356a02933994d0f7ddd625157626cdbf6837ccc57d5fac2c2eb3f2d5d19e87524923e518ff09a1c65dde8e81a48e435e4e0510be387b19a2f9eb054cdf8eb1d27fca964f7d87d4ce993f1c7054ad0c9f938a5a0e4f600e495551afd88e754f554412e3023498488c1d70de4b0f7305510f40", 0xfffffffffffffffb}], 0x3, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r74, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}], 0x58, 0x20024860}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001500)="68f4e636f37674545652953cc60a0b32d2310cc0b1aa4a73d6d7bca68c3344ccea12c01927e207d9b2d14c221f53a1a11efef071aea85a4de9e0a26c1dc3d1b252f3c03c33d3df617572fdb27463175e4810aca9ac0ea8241e9df27896c5a0139511b377bb250612af6a9f08bfb38fe3ea0e137888a2db3d485ed45187fc", 0x7e}, {&(0x7f0000001580)="57ea027def3d062856c93ad640c4daed069a5db52fe4f93d876622521348c8da77d58d14cb90b8c50834798ad90dbbe5da0be7eacf1d4290d1de1dd653810e83484c43c5828cfe5c0497612e2963cff98c4065999d93a69fe49753b7c2a1561a0bcfb96abbf8232679385917189c988a3b52716d287dcdc669228d9e915773ac866341c3b40dc5bb46fcc586597e25", 0x8f}, {&(0x7f0000001640)="2624f07e087745174ca9d2905f0eaf769c0e722f2147beadb8846649ab7c18278aeedf8348bfb99b23d7a7f24ebf92c9c2523605b2d79a2bd10af4420bd72880e9b0617c2e0af56aeedd942e3a4fa740f642f5eb1773b074cf483af8a34a1e5d95c5021496fa566c48cf2f2554c3463e6bce2f1c3749a947a7a9cd597b0d3246e7729b301419ac3c01d5ff9d982a", 0x8e}, {&(0x7f0000001700)="6f6184413ca4dc20f4de0010b7ad3e9e19b2121f", 0x14}], 0x4, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r0, r11, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r15, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r20, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r25, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r30, r31}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r33, r65, r66, r67, r68, r69]}}, @rights={{0x10}}], 0xe8, 0x10}], 0x0, 0x24000400) [ 881.506767][T29354] bridge0: port 3(gretap0) entered blocking state [ 881.514923][T29354] bridge0: port 3(gretap0) entered disabled state [ 881.524069][T29354] device gretap0 entered promiscuous mode [ 881.531120][T29354] bridge0: port 3(gretap0) entered blocking state [ 881.537862][T29354] bridge0: port 3(gretap0) entered forwarding state [ 881.647301][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 881.653177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 881.727230][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 881.733088][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:14:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:51 executing program 2: socketpair(0x14, 0x10e, 0x0, &(0x7f0000000140)) 01:14:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3, 0x200}, &(0x7f0000000280)=0x8) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="55000000180087154703d4dc1c0080930206000000a84309", 0x434}], 0x1}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:crack_exec_t:s0\x00', 0x22, 0x1) r5 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x191, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:14:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:51 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x40480, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/85, 0x55, 0xffffffffffffffff}}, 0x10) r2 = open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x460c77ae7ca0169a) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0x27, 0x68ead07e8b2e9846}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x55, &(0x7f0000000100)=""/85, 0x7bbeb10d89df6739, 0x3, [], 0x0, 0x17, r0, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xe, 0x10000, 0x9}, 0x10, r1, r2}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80840, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) [ 888.315322][T29454] x86/PAT: syz-executor.5:29454 map pfn RAM range req uncached-minus for [mem 0x46d29000-0x46d2afff], got write-back 01:14:51 executing program 2: socketpair(0x14, 0x10f, 0x0, &(0x7f0000000140)) 01:14:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:51 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x40480, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/85, 0x55, 0xffffffffffffffff}}, 0x10) r2 = open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x460c77ae7ca0169a) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0x27, 0x68ead07e8b2e9846}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x55, &(0x7f0000000100)=""/85, 0x7bbeb10d89df6739, 0x3, [], 0x0, 0x17, r0, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xe, 0x10000, 0x9}, 0x10, r1, r2}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80840, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 01:14:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:59 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x1000000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:14:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:14:59 executing program 2: socketpair(0x14, 0x110, 0x0, &(0x7f0000000140)) 01:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:14:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) 01:14:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:59 executing program 2: socketpair(0x14, 0x111, 0x0, &(0x7f0000000140)) [ 896.663754][T29595] x86/PAT: syz-executor.5:29595 map pfn RAM range req uncached-minus for [mem 0x46d40000-0x46d41fff], got write-back 01:14:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:14:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000001c0)) 01:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) [ 896.780538][T29595] IPVS: ftp: loaded support on port[0] = 21 01:14:59 executing program 2: socketpair(0x14, 0x112, 0x0, &(0x7f0000000140)) 01:14:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 897.217311][T26704] tipc: TX() has been purged, node left! 01:15:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x3f00000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:15:06 executing program 2: socketpair(0x14, 0x113, 0x0, &(0x7f0000000140)) 01:15:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:15:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) fcntl$getflags(0xffffffffffffffff, 0x0) 01:15:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) [ 903.902293][T29731] x86/PAT: syz-executor.5:29731 map pfn RAM range req uncached-minus for [mem 0x7dae2000-0x7dae3fff], got write-back 01:15:06 executing program 2: socketpair(0x14, 0x114, 0x0, &(0x7f0000000140)) 01:15:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 903.945559][T29731] IPVS: ftp: loaded support on port[0] = 21 01:15:06 executing program 2: socketpair(0x14, 0x115, 0x0, &(0x7f0000000140)) 01:15:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xf0}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) [ 904.317830][T26704] tipc: TX() has been purged, node left! [ 904.537234][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 904.543097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 904.607278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 904.613192][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x4000000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:15:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x300}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) fcntl$getflags(0xffffffffffffffff, 0x0) 01:15:15 executing program 2: socketpair(0x14, 0x116, 0x0, &(0x7f0000000140)) 01:15:15 executing program 2: socketpair(0x14, 0x117, 0x0, &(0x7f0000000140)) 01:15:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x500}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 913.179516][T29871] x86/PAT: syz-executor.5:29871 map pfn RAM range req uncached-minus for [mem 0x46d58000-0x46d59fff], got write-back 01:15:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:16 executing program 2: socketpair(0x14, 0x118, 0x0, &(0x7f0000000140)) [ 913.335906][T29871] IPVS: ftp: loaded support on port[0] = 21 01:15:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 913.657267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 913.663098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 913.668973][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 913.674762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 913.827365][ T9446] tipc: TX() has been purged, node left! 01:15:25 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x8000000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:15:25 executing program 2: socketpair(0x14, 0x119, 0x0, &(0x7f0000000140)) 01:15:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xe00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) fcntl$getflags(0xffffffffffffffff, 0x0) [ 922.455437][T30007] x86/PAT: syz-executor.5:30007 map pfn RAM range req uncached-minus for [mem 0x3f52a000-0x3f52bfff], got write-back [ 922.486379][T30007] IPVS: ftp: loaded support on port[0] = 21 01:15:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:25 executing program 2: socketpair(0x14, 0x11a, 0x0, &(0x7f0000000140)) 01:15:25 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) [ 922.527203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 922.533042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 922.538907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 922.544692][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:25 executing program 2: socketpair(0x14, 0x11b, 0x0, &(0x7f0000000140)) 01:15:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:25 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) [ 922.777282][ T7] tipc: TX() has been purged, node left! [ 923.247283][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:15:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0xfdffffffffff0f00) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:15:31 executing program 2: socketpair(0x14, 0x11c, 0x0, &(0x7f0000000140)) 01:15:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x4000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:31 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:15:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) fcntl$getflags(0xffffffffffffffff, 0x0) 01:15:31 executing program 2: socketpair(0x14, 0x11d, 0x0, &(0x7f0000000140)) [ 928.747004][T30149] x86/PAT: syz-executor.5:30149 map pfn RAM range req uncached-minus for [mem 0x3f578000-0x3f579fff], got write-back 01:15:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x6000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 928.796795][T30149] IPVS: ftp: loaded support on port[0] = 21 01:15:31 executing program 2: socketpair(0x14, 0x11e, 0x0, &(0x7f0000000140)) 01:15:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x7f00}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) [ 929.257481][ T9418] tipc: TX() has been purged, node left! [ 929.487252][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 929.493166][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0xff0f0a0000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:15:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xf000}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:38 executing program 2: socketpair(0x14, 0x11f, 0x0, &(0x7f0000000140)) 01:15:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:15:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:15:38 executing program 2: socketpair(0x14, 0x120, 0x0, &(0x7f0000000140)) [ 935.886488][T30289] x86/PAT: syz-executor.5:30289 map pfn RAM range req uncached-minus for [mem 0x803e5000-0x803e6fff], got write-back 01:15:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xffff}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) [ 935.943723][T30289] IPVS: ftp: loaded support on port[0] = 21 01:15:38 executing program 2: socketpair(0x14, 0x121, 0x0, &(0x7f0000000140)) 01:15:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:15:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 936.267834][ T9418] tipc: TX() has been purged, node left! [ 936.527353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.533167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 936.539024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.544936][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xbc, 0xff}, {0x6, 0x3f}, {0xe5e6, 0x9}, {0x5, 0x6}, {0x7, 0xd77}, {0x3, 0x2}, {0x1, 0x2}]}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) clone3(0x0, 0x0) 01:15:47 executing program 2: socketpair(0x14, 0x122, 0x0, &(0x7f0000000140)) 01:15:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:15:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 01:15:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:15:47 executing program 2: socketpair(0x14, 0x123, 0x0, &(0x7f0000000140)) 01:15:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:47 executing program 2: socketpair(0x14, 0x124, 0x0, &(0x7f0000000140)) 01:15:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 945.407279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.413147][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 945.419048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.424845][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:52 executing program 2: socketpair(0x14, 0x125, 0x0, &(0x7f0000000140)) 01:15:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8df52fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:15:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x7fffffff, 0x3, [], &(0x7f00000000c0)=0xfb}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x2}, {0x2, 0x4e22, @empty}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='veth0_to_bridge\x00', 0x3, 0x6, 0x7fff}) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:15:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 01:15:52 executing program 2: socketpair(0x14, 0x126, 0x0, &(0x7f0000000140)) 01:15:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:15:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 950.287230][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.293058][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8df53fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 950.367219][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.373045][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:15:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x2401, 0x0) close(r3) 01:15:53 executing program 2: socketpair(0x14, 0x127, 0x0, &(0x7f0000000140)) 01:15:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:15:53 executing program 2: socketpair(0x14, 0x128, 0x0, &(0x7f0000000140)) 01:15:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x2401, 0x0) close(r3) 01:16:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x2401, 0x0) close(r3) 01:16:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:02 executing program 2: socketpair(0x14, 0x129, 0x0, &(0x7f0000000140)) 01:16:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xff2ff58d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 01:16:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x40001, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000002c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) write$P9_RFSYNC(r4, &(0x7f0000000300)={0x7, 0x33, 0x1}, 0x7) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x18, r5, 0x130, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc184) 01:16:02 executing program 2: socketpair(0x14, 0x12a, 0x0, &(0x7f0000000140)) 01:16:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:16:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xff3ff58d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:02 executing program 2: socketpair(0x14, 0x12b, 0x0, &(0x7f0000000140)) 01:16:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:16:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:02 executing program 2: socketpair(0x14, 0x12c, 0x0, &(0x7f0000000140)) 01:16:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) close(r3) 01:16:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x100000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 959.967225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 959.973132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 959.979009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 959.984800][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 960.687291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 960.693119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 960.767310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 960.773176][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) clone3(0x0, 0x0) 01:16:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:09 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1b12520000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:09 executing program 2: socketpair(0x14, 0x12d, 0x0, &(0x7f0000000140)) 01:16:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(0xffffffffffffffff) 01:16:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(0xffffffffffffffff) 01:16:09 executing program 2: socketpair(0x14, 0x12e, 0x0, &(0x7f0000000140)) 01:16:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(0xffffffffffffffff) [ 966.927218][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 966.933034][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:09 executing program 2: socketpair(0x14, 0x12f, 0x0, &(0x7f0000000140)) 01:16:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 967.007251][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 967.013118][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/d\x00', 0x40, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x2000) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=r2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x100000000, 0x80000) write$P9_RWSTAT(r3, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) 01:16:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:16 executing program 4: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") 01:16:16 executing program 2: socketpair(0x14, 0x130, 0x0, &(0x7f0000000140)) 01:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:16 executing program 2: socketpair(0x14, 0x131, 0x0, &(0x7f0000000140)) 01:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:16 executing program 2: socketpair(0x14, 0x132, 0x0, &(0x7f0000000140)) [ 974.527235][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 974.533174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 974.539013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 974.544766][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:25 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:16:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:25 executing program 2: socketpair(0x14, 0x133, 0x0, &(0x7f0000000140)) 01:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e302"}], 0x28}}], 0x1, 0x0) 01:16:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:25 executing program 2: socketpair(0x14, 0x134, 0x0, &(0x7f0000000140)) 01:16:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:26 executing program 2: socketpair(0x14, 0x135, 0x0, &(0x7f0000000140)) 01:16:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\x8e\xf3X\xa4/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x2000036f}], 0x1, 0x20002000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x800002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) 01:16:26 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x52121b000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 983.567223][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 983.573092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 983.647261][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 983.653136][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:33 executing program 2: socketpair(0x14, 0x136, 0x0, &(0x7f0000000140)) 01:16:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7f6f80668000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:33 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x143, 0x0, 0x0, 0x0, 0xfffffffffffffe9b, 0xff000000}}], 0xad, 0x2, 0x0) 01:16:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r3 = dup2(0xffffffffffffffff, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x0, 0x2}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000000000000000000000004b4f948672e5fb09fb7cabd14352075ca6ab4b06a5f8e85e676908c790dd143323cb15c08527d93bbb6da02fe889dcfeffffff00"/86, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e4ffffffaad1932a"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="b46c95d87ee039f5693827112370084c", @local, 0xcaeb, 0x80, 0xffff, 0x0, 0xbc7, 0x1310000, r7}) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000140)) 01:16:33 executing program 2: socketpair(0x14, 0x137, 0x0, &(0x7f0000000140)) 01:16:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:33 executing program 2: socketpair(0x14, 0x138, 0x0, &(0x7f0000000140)) 01:16:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x2001000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:33 executing program 2: socketpair(0x14, 0x139, 0x0, &(0x7f0000000140)) 01:16:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 990.607243][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 990.613064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 990.618945][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 990.624721][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:33 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 01:16:33 executing program 2: socketpair(0x14, 0x13a, 0x0, &(0x7f0000000140)) 01:16:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x15555895, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x7a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:16:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 991.167295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 991.887211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 991.893038][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 991.977224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 991.983067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 996.623059][T32615] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:16:40 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) mmap$fb(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa0fff, 0x100010, r0, 0xff000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:16:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r2}) 01:16:40 executing program 2: socketpair(0x14, 0x13b, 0x0, &(0x7f0000000140)) 01:16:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x2020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:40 executing program 2: socketpair(0x14, 0x13c, 0x0, &(0x7f0000000140)) 01:16:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x1ab) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 01:16:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:40 executing program 2: socketpair(0x14, 0x13d, 0x0, &(0x7f0000000140)) [ 998.127229][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.133087][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 998.207235][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.213078][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:16:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x9000, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:16:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) 01:16:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8000001000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:47 executing program 2: socketpair(0x14, 0x13e, 0x0, &(0x7f0000000140)) 01:16:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:47 executing program 2: socketpair(0x14, 0x13f, 0x0, &(0x7f0000000140)) 01:16:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8066806f7f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:47 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffffdbd}], 0x1}, 0x0) r1 = socket(0x800000010, 0x1000000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500028cfc000543280000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:16:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r2, 0x4b35, 0x401) clone3(0x0, 0x0) 01:16:53 executing program 2: socketpair(0x14, 0x140, 0x0, &(0x7f0000000140)) 01:16:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x90ed0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:16:53 executing program 2: socketpair(0x14, 0x141, 0x0, &(0x7f0000000140)) 01:16:54 executing program 2: socketpair(0x14, 0x142, 0x0, &(0x7f0000000140)) 01:16:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:16:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xc0681e00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:16:54 executing program 2: socketpair(0x14, 0x143, 0x0, &(0x7f0000000140)) 01:16:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xae772156c9c729a1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x900, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0xffffffffffffff78, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xcfab}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x2d}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000240)=0xf, 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000380)={0x7, 'bpq0\x00', {0xc61f}, 0x7}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3d, 0x1}) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x21009510}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fedbdf25010000000000000008410000004c00180000000575647000000000008a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee3259d589764dd13de2065ef24f"], 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x10) clone3(0x0, 0x0) 01:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:03 executing program 2: socketpair(0x14, 0x144, 0x0, &(0x7f0000000140)) 01:17:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xf01f0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/214, 0xd6, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:03 executing program 2: socketpair(0x14, 0x145, 0x0, &(0x7f0000000140)) 01:17:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14}}], 0x18}}, {{&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000280)='b', 0x1}], 0x1, &(0x7f0000000180)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 01:17:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:03 executing program 2: socketpair(0x14, 0x146, 0x0, &(0x7f0000000140)) 01:17:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\b', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:17:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:08 executing program 4: 01:17:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:08 executing program 2: socketpair(0x14, 0x147, 0x0, &(0x7f0000000140)) 01:17:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:08 executing program 2: socketpair(0x14, 0x148, 0x0, &(0x7f0000000140)) 01:17:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:08 executing program 4: 01:17:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:08 executing program 4: 01:17:08 executing program 2: socketpair(0x14, 0x149, 0x0, &(0x7f0000000140)) [ 1025.967231][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.973077][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.979000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.984804][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1026.527221][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1026.533055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1026.538895][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:17:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) clone3(0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x1) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000240)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000040)={0x679, 0x400, 0xdc93, 'queue0\x00'}) r4 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000280)) 01:17:17 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:17 executing program 4: 01:17:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:17 executing program 2: socketpair(0x14, 0x14a, 0x0, &(0x7f0000000140)) 01:17:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:17 executing program 4: 01:17:17 executing program 2: socketpair(0x14, 0x14b, 0x0, &(0x7f0000000140)) 01:17:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:17 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:17 executing program 4: 01:17:17 executing program 2: socketpair(0x14, 0x14c, 0x0, &(0x7f0000000140)) [ 1035.567241][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.573099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.647265][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.653194][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:17:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d1a, &(0x7f00000000c0)=0x7) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) fdatasync(r3) clone3(0x0, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000000)={0x60, 0x391c60d13a458489, 0x4, {{0x9, 0x7, 0x5, 0x9, 0x17d4, 0x4, 0x3, 0xda}}}, 0x60) 01:17:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:23 executing program 2: socketpair(0x14, 0x14d, 0x0, &(0x7f0000000140)) 01:17:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:23 executing program 2: socketpair(0x14, 0x14e, 0x0, &(0x7f0000000140)) 01:17:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:24 executing program 2: socketpair(0x14, 0x14f, 0x0, &(0x7f0000000140)) 01:17:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x5002) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="d7", 0x1}], 0x1) 01:17:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 1041.807233][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1041.813060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1041.887248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1041.893094][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:17:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) close(r0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:17:31 executing program 2: socketpair(0x14, 0x150, 0x0, &(0x7f0000000140)) 01:17:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x1, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 01:17:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:31 executing program 2: socketpair(0x14, 0x151, 0x0, &(0x7f0000000140)) 01:17:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:31 executing program 2: socketpair(0x14, 0x152, 0x0, &(0x7f0000000140)) 01:17:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:31 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) dup2(r5, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000d52ff0), 0x0) socket(0x10, 0x6, 0x4) creat(0x0, 0x0) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) r7 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$setown(r8, 0x8, r7) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) [ 1048.847226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.853068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.858976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.864764][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:17:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='\x00\x02\x00', 0x1, 0x0) r1 = socket(0xa, 0x800, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f00000000c0)=0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000100)={0x6, 0x560, 0x80000000, 0x2, 0x9}) getsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:17:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:40 executing program 2: socketpair(0x14, 0x153, 0x0, &(0x7f0000000140)) 01:17:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x4, [0xc0000102], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 01:17:40 executing program 2: socketpair(0x14, 0x154, 0x0, &(0x7f0000000140)) 01:17:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:40 executing program 2: socketpair(0x14, 0x155, 0x0, &(0x7f0000000140)) 01:17:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x9) clone3(0x0, 0x0) 01:17:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:47 executing program 2: socketpair(0x14, 0x156, 0x0, &(0x7f0000000140)) 01:17:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x4, [0xc0000102], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 01:17:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:47 executing program 2: socketpair(0x14, 0x157, 0x0, &(0x7f0000000140)) 01:17:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:47 executing program 2: socketpair(0x14, 0x158, 0x0, &(0x7f0000000140)) 01:17:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:56 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x93) 01:17:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x4, [0xc0000102], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 01:17:56 executing program 2: socketpair(0x14, 0x159, 0x0, &(0x7f0000000140)) 01:17:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:57 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:17:57 executing program 2: socketpair(0x14, 0x15a, 0x0, &(0x7f0000000140)) 01:17:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:17:57 executing program 2: socketpair(0x14, 0x15b, 0x0, &(0x7f0000000140)) 01:17:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:17:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x4, [0xc0000102], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) [ 1075.087252][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.093119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.167281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.173253][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000000)="8f1997cf5e63da85d128db0b3317280e95d5de551e3dea8af09534d7e710debb046f4cf6133a2d1628d600918c366eb3d7044424202b3e2f3b14031748d860557459437fc0eafb10db563875c13d47983216b4ec8149f94df81588d6072cb36d28436637964cd1289a9d654574a7076ec683967de86d30267f4beac76352a3af8ca3", 0x82) clone3(0x0, 0x0) 01:18:04 executing program 2: socketpair(0x14, 0x15c, 0x0, &(0x7f0000000140)) 01:18:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:04 executing program 4 (fault-call:5 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:18:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:04 executing program 2: socketpair(0x14, 0x15d, 0x0, &(0x7f0000000140)) 01:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:18:04 executing program 2: socketpair(0x14, 0x15e, 0x0, &(0x7f0000000140)) 01:18:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:04 executing program 2: socketpair(0x14, 0x15f, 0x0, &(0x7f0000000140)) 01:18:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40000, 0x0) close(r3) [ 1082.137212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.143150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1082.149002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.154757][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:11 executing program 2: socketpair(0x14, 0x160, 0x0, &(0x7f0000000140)) 01:18:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x40, 0x4) close(r3) 01:18:11 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x50800, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000140)) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0xffffffffffffff77, 0x101000) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) eventfd2(0xfffffffd, 0x801) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x3c6edb9d78ac3d2d}, 0x10) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0xffffffffffffff7e) socket$netlink(0x10, 0x3, 0x15) 01:18:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:11 executing program 2: socketpair(0x14, 0x161, 0x0, &(0x7f0000000140)) 01:18:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0xb000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x40, 0x4, 0x4, 0x9, 0x9, 0x20, 0x0, 0x40, 0x3, 0x0, 0x7, 0x28, 0xffffffff}, {0x9, 0x0, 0x8, 0x40, 0x80, 0x0, 0x0, 0x6, 0x0, 0x5, 0x7, 0x3f}, {0x7, 0x889a, 0x4, 0x7, 0x20, 0x9, 0x80, 0xff, 0x9, 0x1d, 0x2, 0x5, 0xfffffffffffffff7}], 0xffffffff}) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400000, 0x0) close(r5) [ 1088.927680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.933505][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1088.939422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1088.945205][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:11 executing program 2: socketpair(0x14, 0x162, 0x0, &(0x7f0000000140)) 01:18:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:11 executing program 2: socketpair(0x14, 0x163, 0x0, &(0x7f0000000140)) 01:18:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:11 executing program 2: socketpair(0x14, 0x164, 0x0, &(0x7f0000000140)) 01:18:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0ffc, 0x4e73889a859306fd, r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) flock(r0, 0x1) setsockopt$packet_buf(r1, 0x107, 0x7fe92b9c89440482, &(0x7f0000000000)="342c5080", 0x4) 01:18:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000340)=ANY=[@ANYBLOB="0400de00405d4f66c8265a7ba16c7e62585fac104cfe70ef61ea71d3f944e6a47ca488363bf6eff8bf7e4742ccddccf3562e58a2fc9d45824bfc2e6904131763023b7f56479256eeabc380f43587bd4c8f1707b9ed4b61cc58d3e63db5be7f349069f310d008496990ab12a695f07261cbb7d2e69caa6ae3fb8c3412bfbb218986fbbaa85443f4c1e5ec4b5e6d78cf25bfad4676642cb82aae75c53894ecc17468d22ef6899cb3c745633f821343f0c21a312b3610c58a609033e521e623aa5db2e2d1e0d52cfb36daabdc2417b08ec4534ca19dc76a0000000000000000000000ac31db272e169ddfed1eac8c620dc88929860ece9f5233fbfe32b283ffb1ae4e1e5e0b394e89afaaa2367255cc1cdb052cb9385ff42bea9dda49bc6df22cfeb79b936f558f564d9560e6d1518c92d9393ae4adebbcd36c0262d32440222f5d18f26ae4614ebc8b246d1537182134e4d10fec306df9956c6573"]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r5) 01:18:18 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:18 executing program 2: socketpair(0x14, 0x165, 0x0, &(0x7f0000000140)) 01:18:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:18 executing program 2: socketpair(0x14, 0x166, 0x0, &(0x7f0000000140)) 01:18:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:18 executing program 2: socketpair(0x14, 0x167, 0x0, &(0x7f0000000140)) 01:18:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:18 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:25 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0xfffffe31) 01:18:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) sendfile(r1, r3, &(0x7f0000000000)=0x3, 0x3e6) 01:18:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:25 executing program 2: socketpair(0x14, 0x168, 0x0, &(0x7f0000000140)) 01:18:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:26 executing program 2: socketpair(0x14, 0x169, 0x0, &(0x7f0000000140)) 01:18:26 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xff2ff58d00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:26 executing program 2: socketpair(0x14, 0x16a, 0x0, &(0x7f0000000140)) 01:18:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000300)={r0, 0x401, 0x5, "ab1bdf21f88ef5ef5c3bf575e9d3aab9c305ab9a45eb3ece2a0b9ff33b4b91e85839a7f8d2b516eec01e42afbd2b88fcb123e7808a4bcff723890f417e33536572103caaa4fa84060dce9296b90a718c9b88d105ebba11746c69ffad26cf"}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9806c04}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) accept(r7, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x3f354032933b303c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x22401, 0x0) close(r8) [ 1104.207221][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:18:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0xd6000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280020, 0x0) pidfd_send_signal(r1, 0x2c, &(0x7f0000000040)={0x2c, 0x4f6816da}, 0x0) 01:18:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xff3ff58d00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:33 executing program 2: socketpair(0x14, 0x16b, 0x0, &(0x7f0000000140)) 01:18:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x60000012}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r5) 01:18:33 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r0, 0xc0a, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) [ 1110.527226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.533056][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:33 executing program 2: socketpair(0x14, 0x16c, 0x0, &(0x7f0000000140)) 01:18:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:33 executing program 2: socketpair(0x14, 0x16d, 0x0, &(0x7f0000000140)) [ 1111.247226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.253093][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.258996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.265219][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0x27) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:18:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$notify(r3, 0x402, 0x80000000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:18:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:40 executing program 3: socket$inet6(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:40 executing program 2: socketpair(0x14, 0x16e, 0x0, &(0x7f0000000140)) 01:18:40 executing program 2: socketpair(0x14, 0x16f, 0x0, &(0x7f0000000140)) 01:18:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1117.757951][ T5997] x86/PAT: syz-executor.5:5997 map pfn RAM range req uncached-minus for [mem 0x3e109000-0x3e10afff], got write-back 01:18:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8000, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) 01:18:40 executing program 2: socketpair(0x14, 0x170, 0x0, &(0x7f0000000140)) 01:18:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:40 executing program 2: socketpair(0x14, 0x171, 0x0, &(0x7f0000000140)) [ 1118.047221][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.053076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.058972][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.064768][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$getown(r1, 0x9) process_vm_writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/167, 0xa7}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000100)=""/181, 0xb5}], 0x3, &(0x7f0000001880)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/179, 0xb3}, {&(0x7f0000001700)=""/81, 0x51}, {&(0x7f0000001780)=""/244, 0xf4}], 0x9, 0x0) clone3(0x0, 0x0) 01:18:47 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:47 executing program 2: socketpair(0x14, 0x172, 0x0, &(0x7f0000000140)) 01:18:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x40, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f00000003c0)={0x1, &(0x7f00000002c0)="f5992dd63977b3f04bc95ae5f903127fc3c28e80c832acd50e2fb48e20338c4221204fc2348c49ae645c3a48aa8ef1bf6ddd2a2224b548fd8fad344508c03929270a677d3cfdf018e5e4815bb1d7b8f0e30ac6bcbb6a4fef369e6668d247d1f8080ba4b0a90474862d1be77e4c20d0dd896c4f85e2b5e7d4545071d228dafd5bdeeff020302b316c5b9d505f2145c2b6b62af4b21325d2b81fb1d655d03fe157c400a4f29a31fe46becdcdef7b1406fbd8a2576bee9590c4720f417a42abec2604a0546b63210b403448f0370875d4bda3d6f5076168c710213fab15624f914dd987"}) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xeebf, 0x200000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xbc, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0xfffffffffffffeae, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff5e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0xfffffffffffffe1a, 0x6, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2404c020}, 0x2400c104) 01:18:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:47 executing program 2: socketpair(0x14, 0x173, 0x0, &(0x7f0000000140)) [ 1125.029973][ T6336] x86/PAT: syz-executor.5:6336 map pfn RAM range req uncached-minus for [mem 0x3eb30000-0x3eb31fff], got write-back 01:18:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl(r4, 0x6, &(0x7f0000000080)="e7df696a9f08e2fab26a41ab67586fe6135862e0a15a72218a007e415508b7c93e3d6883d0d2a19afe6ec230aa378de31f5b5f49739433eb05adc76d543e52a97aac9509aa6b9a946e4d9bfa82c3ecade603d640e0cc5722dfd684964f4783f212e110d340789dcdc63408a8038d0effba12c82760b073d1dabeffcfdcbbcdc81eeccf20692f42a4b5a01bf72d87c2e5ab3f478b4fa919e5cc") close(r3) [ 1125.087208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.093027][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:47 executing program 2: socketpair(0x14, 0x174, 0x0, &(0x7f0000000140)) 01:18:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 1125.461191][ T6559] x86/PAT: syz-executor.5:6559 map pfn RAM range req uncached-minus for [mem 0x3e348000-0x3e349fff], got write-back [ 1125.817223][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.823052][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.829065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.834835][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:56 executing program 2: socketpair(0x14, 0x175, 0x0, &(0x7f0000000140)) 01:18:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:18:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000080), 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r2, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:18:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:18:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x1}, &(0x7f00000001c0)=0x8) pipe2(&(0x7f0000000040), 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000200)=0x8) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x100000001, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x12}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r4, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) fcntl$dupfd(r6, 0x605, r5) clone3(0x0, 0x0) 01:18:57 executing program 2: socketpair(0x14, 0x176, 0x0, &(0x7f0000000140)) 01:18:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1134.339298][ T6677] x86/PAT: syz-executor.5:6677 map pfn RAM range req uncached-minus for [mem 0x3e0f4000-0x3e0f5fff], got write-back 01:18:57 executing program 2: socketpair(0x14, 0x177, 0x0, &(0x7f0000000140)) 01:18:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2c80c2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x595801, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) setns(r4, 0xdaa58894bee5b54a) close(r3) 01:18:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:18:57 executing program 2: socketpair(0x14, 0x178, 0x0, &(0x7f0000000140)) 01:18:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1134.601594][ T6905] x86/PAT: syz-executor.5:6905 map pfn RAM range req uncached-minus for [mem 0x81d86000-0x81d87fff], got write-back 01:18:57 executing program 2: socketpair(0x14, 0x179, 0x0, &(0x7f0000000140)) [ 1134.687203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.693082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.699109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.704901][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:18:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r8, 0x5433, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000080)={[0x10000, 0xd000, 0x5000, 0x2000], 0x4, 0x60, 0x10001}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[r5, r2, r3, r2, r6, r7], 0x6) 01:18:57 executing program 2: socketpair(0x14, 0x17a, 0x0, &(0x7f0000000140)) 01:18:57 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x1000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:19:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:06 executing program 2: socketpair(0x14, 0x17b, 0x0, &(0x7f0000000140)) 01:19:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r0, 0x5433, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x40000000000000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) close(r4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x2f1) 01:19:06 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:06 executing program 2: socketpair(0x14, 0x17c, 0x0, &(0x7f0000000140)) [ 1143.574051][ T7225] x86/PAT: syz-executor.5:7225 map pfn RAM range req uncached-minus for [mem 0x818d3000-0x818d4fff], got write-back 01:19:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:06 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) bind$can_raw(0xffffffffffffffff, &(0x7f0000002600)={0x1d, r5}, 0x10) [ 1143.919141][ T7452] x86/PAT: syz-executor.5:7452 map pfn RAM range req uncached-minus for [mem 0x3e300000-0x3e301fff], got write-back 01:19:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) getpeername$unix(r1, &(0x7f0000000180), &(0x7f00000000c0)=0x374) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0xf80492bd67ece6, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000240)=0x80000001) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000140)={0xccf550a2cd75c120, 0x0, 0x101, 0x4, {0x5, 0x6, 0x0, 0x2e67756b}}) clone3(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x520726131b9ec3a1, &(0x7f0000000100)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000000)=0x100) sendto$unix(r1, &(0x7f0000000280)="437dbc91e7d569b3daaf0d9e03116694c4d5c7e067b1378b4fb0fe3e6ee14017245386115f04521631ee38a6abf648e307bf017da96e2b83264de3da6fb84fe26a65e6ff624dccd94f0fb8e163758f53b31262ff83d555d590e5", 0x5a, 0x4000, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 01:19:13 executing program 2: socketpair(0x14, 0x17d, 0x0, &(0x7f0000000140)) 01:19:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/102, 0x66) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:19:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:13 executing program 2: socketpair(0x14, 0x17e, 0x0, &(0x7f0000000140)) [ 1150.797404][ T7670] x86/PAT: syz-executor.5:7670 map pfn RAM range req uncached-minus for [mem 0x3e100000-0x3e101fff], got write-back 01:19:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x181}, "26cf8bb3c58b0894", "cf9215b52f1d59e772205fcd174ea1e7", "4bef6683", "a5ff5feb8770d9ad"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)={0x0, 0xffffffff, 0xa630, &(0x7f0000000080)=0x7fff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r5) 01:19:13 executing program 2: socketpair(0x14, 0x17f, 0x0, &(0x7f0000000140)) 01:19:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 1151.074379][ T7902] x86/PAT: syz-executor.5:7902 map pfn RAM range req uncached-minus for [mem 0x3eb3e000-0x3eb3ffff], got write-back [ 1151.337257][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.343125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1151.349089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.354861][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x61e}}, 0x200, 0x4, 0x400, 0x2, 0xc}, 0x98) 01:19:22 executing program 2: socketpair(0x14, 0x180, 0x0, &(0x7f0000000140)) 01:19:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r5, 0x4, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e24, 0x2, @remote, 0xfffff001}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x34200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0fc7300f01c3c4e179d7d40f23110fb14900500f01d09a050000002e01c4e2f92153bcb8caf900000f23c00f21f835020006000f23f8", 0x36}], 0x1, 0x6c, &(0x7f0000000340)=[@dstype3={0x7, 0x3}, @cstype3={0x5, 0xb}], 0x2) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000001c0)={0x0, 0xc00e5d7bfe4d3208, 0xfffffffffffffffa, 0x80000001}) close(r8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0xf25e22012e9e6b35, 0x0) 01:19:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:22 executing program 2: socketpair(0x14, 0x181, 0x0, &(0x7f0000000140)) [ 1160.076453][ T8108] x86/PAT: syz-executor.5:8108 map pfn RAM range req uncached-minus for [mem 0x46d51000-0x46d52fff], got write-back 01:19:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:22 executing program 2: socketpair(0x14, 0x182, 0x0, &(0x7f0000000140)) 01:19:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/81, 0x51) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:19:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:23 executing program 2: socketpair(0x14, 0x183, 0x0, &(0x7f0000000140)) [ 1160.367232][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.373096][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.447201][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.453093][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa0ff8, 0x580b9d2827a814d3, r0, 0x28000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x688d95beb2ae1879) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x8, 0x6, 0x5}) 01:19:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/3o\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:19:30 executing program 2: socketpair(0x14, 0x184, 0x0, &(0x7f0000000140)) 01:19:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:30 executing program 2: socketpair(0x14, 0x185, 0x0, &(0x7f0000000140)) 01:19:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1167.407230][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.413114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.419015][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.424798][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:30 executing program 2: socketpair(0x14, 0x186, 0x0, &(0x7f0000000140)) 01:19:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:30 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/15}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U-', 0x200}, 0x28, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r7, 0x5433, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1, 0x7c1) preadv(r8, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f00000005c0)=""/216, 0xd8}], 0x3, 0x6a) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) sendmsg$nl_route(r5, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESOCT=r6], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYPTR, @ANYPTR, @ANYRES64], @ANYRESHEX=r9, @ANYRES16], @ANYRESHEX=r5, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r10, @ANYRES16=r11, @ANYRES64=r6, @ANYPTR, @ANYBLOB="07a4f9dfb7571a9bae07dea64359c7"], @ANYRES16, @ANYRESDEC], 0x5}}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000340)=0x6, 0x4) close(r12) 01:19:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1167.967215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.973051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.978902][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.984665][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xc80, 0xae813177f96ba77e, 0xa0, 0x1e0, 0x9, 0x38, 0x1, 0x0, {0x1, 0x2814}, {0x400, 0x9}, {0x800, 0x101}, {0x5, 0xb2, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1, 0x5, 0x1000, 0x2, 0x9, 0x8000, 0x6, 0x20, 0x0, 0x0, 0x3}) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:19:37 executing program 2: socketpair(0x14, 0x187, 0x0, &(0x7f0000000140)) 01:19:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x9) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:19:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:37 executing program 2: socketpair(0x14, 0x188, 0x0, &(0x7f0000000140)) 01:19:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:37 executing program 2: socketpair(0x14, 0x189, 0x0, &(0x7f0000000140)) 01:19:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) write$P9_RWALK(r3, &(0x7f0000000080)={0x30, 0x6f, 0x2, {0x3, [{0x9c5f9c2310246d90, 0x4, 0x4}, {0x1, 0x4}, {0xc4}]}}, 0x30) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nv&\x10\x18s', 0x187001, 0x0) close(r4) 01:19:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1174.927213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.933039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.007220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.013070][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:42 executing program 2: socketpair(0x14, 0x18a, 0x0, &(0x7f0000000140)) 01:19:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) 01:19:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) clone3(0x0, 0x0) 01:19:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:42 executing program 2: socketpair(0x14, 0x18b, 0x0, &(0x7f0000000140)) 01:19:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:42 executing program 2: socketpair(0x14, 0x18c, 0x0, &(0x7f0000000140)) [ 1179.887231][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.893082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.898978][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.904768][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='\x00\x00\t\xf0\xfd\xfc\xff\xff\xff\x00', 0x80, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0x1) close(r3) 01:19:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:42 executing program 2: socketpair(0x14, 0x18d, 0x0, &(0x7f0000000140)) 01:19:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:42 executing program 2: socketpair(0x14, 0x18e, 0x0, &(0x7f0000000140)) [ 1180.447238][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.453088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.458953][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.464703][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') delete_module(&(0x7f0000000200)='\x00', 0xc00) ioctl$TCSETX(r1, 0x5433, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x17, 0x20, 0x70bd2e, 0x25dfdbff, {0x4}, [@typed={0xb8, 0x40, @binary="88adce63eaa02c24a9b7264ec95dd5926ae21e49666e74a6e1430df2f4fd823909958b3813c57d05dbcc56162913dc439ab42b05c4536534dbaf235498e3b740eeefef500cc1ca02230643290eefddd2e4e53ade35725ce2af25fea84a17e44d140367db180d29860b68d647025b2d2564d7ad981f0d251ba836aa64168f9e02339d4071f512c22fffca83b915a601974580ebdfc72f65fecd2edf1e09210a320ef80634f67b312723de67218b91addf3431a9"}, @typed={0x4, 0x56}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x14000000) clone3(0x0, 0x0) 01:19:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f00000001c0)=""/133, &(0x7f0000000140)=0x85) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sched_setscheduler(r3, 0x6, &(0x7f00000000c0)=0x5) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000280)='/dev/audio\x00', 0xb) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r4, 0x2, 0x6, [0x8, 0x0, 0x62d, 0x9, 0x6, 0x7]}, 0x14) fcntl$dupfd(r0, 0x0, r1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r5) socket$pptp(0x18, 0x1, 0x2) 01:19:49 executing program 2: socketpair(0x14, 0x18f, 0x0, &(0x7f0000000140)) 01:19:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:49 executing program 2: socketpair(0x14, 0x190, 0x0, &(0x7f0000000140)) 01:19:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:49 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:49 executing program 2: socketpair(0x14, 0x191, 0x0, &(0x7f0000000140)) 01:19:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0xa080, 0x0) getsockopt$inet6_dccp_buf(r8, 0x21, 0xc, &(0x7f00000003c0)=""/4096, &(0x7f0000000140)=0x1000) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) r10 = open(&(0x7f0000000200)='./file1\x00', 0x82000, 0x41c4540e42337989) ioctl$CAPI_INSTALLED(r10, 0x80024322) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000080)=0xfffffffffffffffe) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000000)={0xffffffffffffffff, r7, 0xfff}) close(r3) [ 1187.407228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.413161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.487198][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.493029][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:56 executing program 2: socketpair(0x14, 0x192, 0x0, &(0x7f0000000140)) 01:19:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:56 executing program 4: openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x321200, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000000)=0x6) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x149dc2, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r9, 0x5433, 0x0) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000000c0)={r12, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e22, 0x800, @rand_addr="5bdbd8bc53dda213bf7de37c40d4f2ed", 0xfff}}, 0xffff}, 0x90) close(r5) 01:19:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:19:56 executing program 0: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x95, 0x7f, 0x6, 'queue1\x00', 0x69}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r1, 0x5433, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x1, 0x0, "c0260991493918b8eed9c614c6a9c42165cba0d84ec5c2963f2b2b37f9c1f1abdb7e8c13a1cba6510872738f8c8b34c7d5932de48ad2d0bdba465a9246ed30ecd2935727b84f92815b1fa504c0b8f2b9"}, 0xd8) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, [], 0x1d}, 0x1000, 0x40, 0xfff, 0x100, 0x10001, 0x1020010, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) write$P9_RLINK(r6, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$TCSETX(r5, 0x5433, 0x0) mq_open(&(0x7f00000001c0)=')\'selinux\xbc\x00', 0x0, 0x20, &(0x7f0000000200)={0x40, 0x7, 0x7, 0x7, 0xcf, 0x8000, 0x4f13, 0x8000}) mmap$usbmon(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x40010, r5, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r7, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) clone3(0x0, 0x0) 01:19:56 executing program 2: socketpair(0x14, 0x193, 0x0, &(0x7f0000000140)) 01:19:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:57 executing program 2: socketpair(0x14, 0x194, 0x0, &(0x7f0000000140)) 01:19:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:19:57 executing program 2: socketpair(0x14, 0x195, 0x0, &(0x7f0000000140)) [ 1194.447222][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.453068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.458969][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.464761][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:19:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r4, 0x101}}, 0x10) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r5) 01:19:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:19:57 executing program 2: socketpair(0x14, 0x196, 0x0, &(0x7f0000000140)) 01:19:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 1195.007250][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:19:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 1195.727216][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.733083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.807228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.813241][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:20:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4000, 0x0) clone3(0x0, 0x0) 01:20:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = io_uring_setup(0x7c, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180), 0x403b) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x80000400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r4) 01:20:04 executing program 2: socketpair(0x14, 0x197, 0x0, &(0x7f0000000140)) 01:20:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:20:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:04 executing program 2: socketpair(0x14, 0x198, 0x0, &(0x7f0000000140)) 01:20:04 executing program 2: socketpair(0x14, 0x199, 0x0, &(0x7f0000000140)) 01:20:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:04 executing program 2: socketpair(0x14, 0x19a, 0x0, &(0x7f0000000140)) 01:20:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 1201.977229][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.983162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1202.047230][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.053075][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:20:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x5}) clone3(0x0, 0x0) 01:20:13 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 01:20:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:13 executing program 2: socketpair(0x14, 0x19b, 0x0, &(0x7f0000000140)) 01:20:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:20:13 executing program 2: socketpair(0x14, 0x19c, 0x0, &(0x7f0000000140)) 01:20:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) io_setup(0x4, &(0x7f0000000000)=0x0) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r6, 0x5433, 0x0) io_submit(r3, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xf800, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x9}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xf7ac, r0, &(0x7f00000000c0)="e03db6dc05ec30776d9ab39e492e38dd0a0686689ffa38fb8a018d4c3e5a4a10e144d85004e0ef67713976332d55551d2381f88d5609", 0x36, 0x3, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f0000000140)="c853ed1a9ffa3a3d9812605b755c038b036c17d85ad1c7d1a09537ca725c5dd62bfb90bf4c52c9b258edf1", 0x2b, 0x80000001, 0x0, 0x0, r6}]) 01:20:13 executing program 2: socketpair(0x14, 0x19d, 0x0, &(0x7f0000000140)) 01:20:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1211.087200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.093077][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.098998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.104784][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:20:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x80c, 0xffffffffffffffff) clone3(0x0, 0x0) 01:20:22 executing program 2: socketpair(0x14, 0x19e, 0x0, &(0x7f0000000140)) 01:20:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r3) 01:20:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:20:22 executing program 2: socketpair(0x14, 0x19f, 0x0, &(0x7f0000000140)) 01:20:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r2) 01:20:22 executing program 2: socketpair(0x14, 0x1a0, 0x0, &(0x7f0000000140)) 01:20:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) [ 1220.697210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1220.703043][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:20:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:29 executing program 2: socketpair(0x14, 0x1a1, 0x0, &(0x7f0000000140)) 01:20:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) 01:20:29 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200, 0x0) ioctl$int_in(r1, 0xfc63, &(0x7f0000000300)=0x2) lseek(r1, 0x1, 0x4) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone3(0x0, 0x0) 01:20:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:20:29 executing program 2: socketpair(0x14, 0x1a2, 0x0, &(0x7f0000000140)) 01:20:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) sendmmsg$inet(r4, &(0x7f0000000080), 0x0, 0x6060045) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r5, 0x5433, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/92, 0x5c, 0xa8b527c1a15dce17, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) ioctl$TCSETX(r3, 0x5433, 0x0) read$alg(r3, &(0x7f0000000000)=""/61, 0x3d) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r6) r7 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8000) write$char_usb(r7, &(0x7f00000001c0)="4fd655ddd2fb5f8f0ece6a5e628dd57e1fdbe6e745cb7ec52a9918496d4af0bb84ae55901da3134b61b92057bfaad6c5fca676899a9f7832386a8402f89202df58b35e89df57e3d5d5f58c4d0a3be70fc2cddfa18fd311e99cc8d2369679575d86b302e2556326c533ddfd4a51516e67c346802cc9901fc01a6eb73f5cad", 0x7e) 01:20:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:30 executing program 2: socketpair(0x14, 0x1a3, 0x0, &(0x7f0000000140)) 01:20:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:30 executing program 2: socketpair(0x14, 0x1a4, 0x0, &(0x7f0000000140)) 01:20:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x800, 0x0) fcntl$dupfd(r0, 0x0, r1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r3, 0x5433, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r4, 0x5433, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400240) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r5) 01:20:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:30 executing program 2: socketpair(0x14, 0x1a5, 0x0, &(0x7f0000000140)) [ 1227.727220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.733394][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.739276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.745058][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:20:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair(0x5, 0x80000, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r4, 0xffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x6}, 0x8) clone3(0x0, 0x0) 01:20:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = fcntl$dupfd(r0, 0xc0a, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2401, 0x0) close(r3) 01:20:37 executing program 2: socketpair(0x14, 0x1a6, 0x0, &(0x7f0000000140)) 01:20:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:20:37 executing program 2: socketpair(0x14, 0x1a7, 0x0, &(0x7f0000000140)) 01:20:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x3c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 01:20:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 01:20:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa0fff, 0x12, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 01:20:37 executing program 2: socketpair(0x14, 0x1a8, 0x0, &(0x7f0000000140)) 01:20:37 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000000800008000f8ffff0600000001feffff05000000050000000900000000000000000000000000000000000000060000000e00000002000000ff0000000400000001000000000000000000000000000000000000c003000000010000000040010007000000ffff00000000000004000000000000000000000006000000090000000c000000010100006d000000000200001fb7000000000000000000000000000007000000e70000000700000007000000040000000700000000040000000000000000000000000000000000c007000000b43adc3640000000d17d0000080000000000008000"/248]) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$TCSETX(r2, 0x5433, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) socket$pptp(0x18, 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) close(r4) [ 1240.542499][T12888] ------------[ cut here ]------------ [ 1240.548009][T12888] WARNING: CPU: 1 PID: 12888 at mm/memory.c:2229 wp_page_copy+0x10b7/0x1560 [ 1240.556664][T12888] Kernel panic - not syncing: panic_on_warn set ... [ 1240.563263][T12888] CPU: 1 PID: 12888 Comm: syz-executor.0 Not tainted 5.5.0-rc2-syzkaller #0 [ 1240.571917][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.581961][T12888] Call Trace: [ 1240.585245][T12888] dump_stack+0x197/0x210 [ 1240.589563][T12888] ? wp_page_copy+0x10b0/0x1560 [ 1240.594400][T12888] panic+0x2e3/0x75c [ 1240.598292][T12888] ? add_taint.cold+0x16/0x16 [ 1240.603011][T12888] ? printk+0xba/0xed [ 1240.606977][T12888] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1240.612417][T12888] ? __warn.cold+0x14/0x3e [ 1240.616819][T12888] ? wp_page_copy+0x10b7/0x1560 [ 1240.621658][T12888] __warn.cold+0x2f/0x3e [ 1240.625888][T12888] ? report_bug.cold+0x63/0xb2 [ 1240.630635][T12888] ? wp_page_copy+0x10b7/0x1560 [ 1240.635469][T12888] report_bug+0x289/0x300 [ 1240.639827][T12888] do_error_trap+0x11b/0x200 [ 1240.644403][T12888] do_invalid_op+0x37/0x50 [ 1240.648800][T12888] ? wp_page_copy+0x10b7/0x1560 [ 1240.653636][T12888] invalid_op+0x23/0x30 [ 1240.657774][T12888] RIP: 0010:wp_page_copy+0x10b7/0x1560 [ 1240.663214][T12888] Code: 4c 89 f7 ba 00 10 00 00 48 81 e6 00 f0 ff ff e8 2f 02 23 06 31 ff 41 89 c7 89 c6 e8 23 03 d3 ff 45 85 ff 74 0f e8 99 01 d3 ff <0f> 0b 4c 89 f7 e8 5f f4 22 06 e8 8a 01 d3 ff 65 4c 8b 34 25 c0 1e [ 1240.682797][T12888] RSP: 0018:ffffc90005fb78c8 EFLAGS: 00010216 [ 1240.688847][T12888] RAX: 0000000000040000 RBX: ffffc90005fb7b78 RCX: ffffc90001e69000 [ 1240.696802][T12888] RDX: 0000000000000412 RSI: ffffffff81a22a07 RDI: 0000000000000005 [ 1240.704757][T12888] RBP: ffffc90005fb7a08 R08: ffff888059a0a300 R09: 0000000000000000 [ 1240.712710][T12888] R10: ffffed10103523ff R11: ffff888081a91fff R12: ffff8880a6983568 [ 1240.720666][T12888] R13: ffffea000206a440 R14: ffff888081a91000 R15: 0000000000001000 [ 1240.728637][T12888] ? wp_page_copy+0x10b7/0x1560 [ 1240.733474][T12888] ? wp_page_copy+0x10b7/0x1560 [ 1240.738320][T12888] ? find_held_lock+0x35/0x130 [ 1240.743070][T12888] ? follow_pfn+0x2a0/0x2a0 [ 1240.747557][T12888] ? lock_downgrade+0x920/0x920 [ 1240.752392][T12888] ? vm_normal_page+0x15d/0x3c0 [ 1240.757226][T12888] ? __pte_alloc_kernel+0x210/0x210 [ 1240.762841][T12888] ? do_raw_spin_unlock+0x181/0x270 [ 1240.768111][T12888] do_wp_page+0x543/0x1540 [ 1240.772512][T12888] ? do_raw_spin_lock+0x139/0x2f0 [ 1240.777521][T12888] ? lock_acquire+0x190/0x410 [ 1240.782206][T12888] ? finish_mkwrite_fault+0x5c0/0x5c0 [ 1240.787582][T12888] ? fault_around_bytes_set+0xa0/0xa0 [ 1240.792973][T12888] __handle_mm_fault+0x327b/0x3da0 [ 1240.798091][T12888] ? vm_iomap_memory+0x1a0/0x1a0 [ 1240.803036][T12888] ? handle_mm_fault+0x292/0xa50 [ 1240.807972][T12888] ? handle_mm_fault+0x7a0/0xa50 [ 1240.812907][T12888] ? __kasan_check_read+0x11/0x20 [ 1240.817922][T12888] handle_mm_fault+0x3b2/0xa50 [ 1240.822681][T12888] __do_page_fault+0x536/0xd80 [ 1240.827435][T12888] do_page_fault+0x38/0x590 [ 1240.831926][T12888] page_fault+0x39/0x40 [ 1240.836078][T12888] RIP: 0010:__put_user_4+0x1c/0x30 [ 1240.841173][T12888] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1e 02 00 48 8b 9b d0 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 1240.860757][T12888] RSP: 0018:ffffc90005fb7e18 EFLAGS: 00010297 [ 1240.866803][T12888] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1240.874755][T12888] RDX: 0000000000000058 RSI: ffffffff81a1da81 RDI: 0000000000000282 [ 1240.882705][T12888] RBP: ffffc90005fb7ee0 R08: 0000000000000001 R09: ffff888059a0ab90 [ 1240.890661][T12888] R10: fffffbfff14f33c0 R11: ffffffff8a799e07 R12: 0000000000080000 [ 1240.898615][T12888] R13: 0000000000000004 R14: 0000000000000005 R15: 0000000000080000 [ 1240.906584][T12888] ? __might_fault+0x1a1/0x1e0 [ 1240.911338][T12888] ? __sys_socketpair+0x11f/0x5d0 [ 1240.916437][T12888] ? __ia32_sys_socket+0xb0/0xb0 [ 1240.921380][T12888] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1240.926822][T12888] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1240.932266][T12888] ? do_syscall_64+0x26/0x790 [ 1240.936926][T12888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1240.942999][T12888] ? do_syscall_64+0x26/0x790 [ 1240.947673][T12888] __x64_sys_socketpair+0x97/0xf0 [ 1240.952687][T12888] do_syscall_64+0xfa/0x790 [ 1240.957298][T12888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1240.963193][T12888] RIP: 0033:0x45a919 [ 1240.967078][T12888] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1240.986672][T12888] RSP: 002b:00007fd552ee2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1240.995070][T12888] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a919 [ 1241.003024][T12888] RDX: 000000000000003f RSI: 0000000000080000 RDI: 0000000000000005 [ 1241.010976][T12888] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1241.018930][T12888] R10: 0000000020000000 R11: 0000000000000246 R12: 00007fd552ee36d4 [ 1241.026885][T12888] R13: 00000000004caab3 R14: 00000000004e3d90 R15: 00000000ffffffff [ 1241.036547][T12888] Kernel Offset: disabled [ 1241.041011][T12888] Rebooting in 86400 seconds..