fffffffff, 0xa, 0x18) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) 17:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 17:02:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:43 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x511400, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x102, 0x2, {0x2, 0x4, 0x2, 0xfffffff7}}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) accept(r1, 0x0, &(0x7f0000000100)) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) getsockname$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) r4 = dup(r3) munlockall() ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r6, 0x5, 0xfffa, 0x7f, 0x2, 0xff}, 0x14) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000880)={0x37b, 0x2, 0x4, 0x20, 0x10001, {0x0, 0xea60}, {0x4, 0x8, 0xe0, 0x1f, 0x3, 0x8, "d909a561"}, 0x1000000, 0x2, @userptr=0x3, 0x8001, 0x0, r0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000622000/0x2000)=nil, &(0x7f0000df3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000bff000/0x2000)=nil, &(0x7f0000533000/0x4000)=nil, &(0x7f0000e9a000/0x4000)=nil, &(0x7f0000bd9000/0x4000)=nil, &(0x7f00007d2000/0x4000)=nil, &(0x7f0000000240)="4966b5af90ed932c0d6f46afd7f1a243895129ad07731bb6be6378df0310b31fe1d4c395f36957e0fff25b6604bb604fdfbf0751221615c7045c953e636eeee934a05e6c0aa7c0ab937f0b951b", 0x4d, r7}, 0x68) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) [ 418.901886] bond177: Enslaving bridge122 as a backup interface with an up link 17:02:43 executing program 3: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 17:02:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x2, @userptr=0x7f}) 17:02:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x40, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x8040) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400800, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000080)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x10000, 0x0) bind$rds(r5, &(0x7f0000000280)={0x2, 0x4e21, @private=0xa010100}, 0x10) 17:02:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x184, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x160, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e3da692}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383f5895}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73343ba0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4431b1be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42ab448e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f24499e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x529fd4d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ab990c2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x338c80bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b671536}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48e43b30}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a9a2892}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b52783d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba6e183}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14abb1fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ae54682}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b34118f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4817f16c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x418ec009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b48ac91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5efcebd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a1e2f37}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44}, 0x800) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x180, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) epoll_create1(0x80000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r2) r3 = getegid() r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r5, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1, r2}], {}, [{0x8, 0x0, r3}, {0x8, 0x4}, {0x8, 0x1, r5}], {}, {0x20, 0x2}}, 0x4c, 0x1) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f00000003c0)=0x10000, 0x4) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) set_tid_address(&(0x7f0000000380)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0xfff, 0x0, &(0x7f00000000c0), 0x11, &(0x7f0000000240)={[{@utf8='utf8'}, {@disable_sparse_yes='disable_sparse=yes'}, {@uid={'uid', 0x3d, r2}}, {@fmask={'fmask', 0x3d, 0x100000000}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x2}}, {@errors_recover='errors=recover'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/vbi#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/vbi#\x00'}}, {@hash='hash'}, {@fowner_eq={'fowner', 0x3d, r6}}]}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:44 executing program 3: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) dup2(r2, r1) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0xaea, {0x0, 0xea60}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd=r1}) [ 419.215985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.261992] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 419.294998] ntfs: (device loop5): parse_options(): Unrecognized mount option smackfsdef. [ 419.298437] bond178: Enslaving bridge123 as a backup interface with an up link 17:02:44 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x40, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x6, 0x4}, &(0x7f00000000c0)=0x90) 17:02:44 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000001c0)=""/240, &(0x7f0000000000)=0xf0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'bridge_slave_1\x00', &(0x7f0000000340)=@ethtool_rxfh={0x0, 0x2, 0x1000, 0x3, 0x8, "d6cfda", 0x8000, [0x0, 0x0, 0x1, 0x4, 0x400, 0x95f3, 0x0, 0x3f]}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@v2={0x5, 0x1, 0x10, 0x8, 0x30, "b14614b445fbcf701ad51b287286e67b34676700c47a117cf7aef209ab1150751dab988eb95314ae2ea082c0049ebbb5"}, 0x39, 0x3) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1d, 0x4, @tid=r3}, &(0x7f00000000c0)=0x0) timer_delete(r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x2, 0x5, 0x4, @local, @local, 0x1, 0x8000, 0x2, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf25130000006000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c657230000000000000140002006261746164765f736c6176655f310000140002006272696467655f736c6176655f3000005800018008000300010000001400020076657468305f766c616e000000000000140002006261746164765f736c6176655f3000001400020077673100000000000000000000000000080003000000000008000300010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0302000000ea000000000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030000000000140002006970365f76746930000000000000000008000100", @ANYRES32=r8, @ANYBLOB="18000180140002006d6163766c616e300000000000000000"], 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) 17:02:44 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x3f, 0x7291, 0xfb, 0x1, 0x0, 0x400, 0x8c8a, 0xe21, 0x5]) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0100"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 17:02:44 executing program 2 (fault-call:11 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={r5, 0x400}, &(0x7f00000002c0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x8d, 0x9a, 0xefa1}, &(0x7f0000000240)) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0xfffffffe, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff03}) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x3}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:44 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)={0x2, 0x0, [{}, {}]}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0xc, @vbi={0xfffff000, 0x3, 0x3, 0x34343452, [0x7, 0x8], [0x5, 0xfffffc01], 0x1}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x868f) 17:02:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/sockstat6\x00') ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd=0xffffffffffffffff}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f00000000c0)={0x5, 0x3, 0x4, 0x10, 0x4, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x0, 0x0, 0xea, "dd217d4d"}, 0xffffffff, 0x4, @planes=&(0x7f0000000080)={0x80000000, 0x6, @fd=r6, 0x12}, 0x4}) [ 419.504495] FAULT_INJECTION: forcing a failure. [ 419.504495] name failslab, interval 1, probability 0, space 0, times 0 [ 419.547845] CPU: 1 PID: 7146 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 419.555678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.565117] Call Trace: [ 419.567708] dump_stack+0x1b2/0x283 [ 419.571344] should_fail.cold+0x10a/0x154 [ 419.575499] should_failslab+0xd6/0x130 [ 419.579473] kmem_cache_alloc_node+0x25f/0x400 [ 419.583315] bond179: Enslaving bridge124 as a backup interface with an up link [ 419.584115] __alloc_skb+0x9a/0x4c0 [ 419.595027] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 419.599916] ? netlink_autobind.isra.0+0xa9/0x290 [ 419.604763] ? netlink_autobind.isra.0+0x1c5/0x290 [ 419.609698] netlink_sendmsg+0x921/0xbb0 [ 419.613770] ? nlmsg_notify+0x160/0x160 [ 419.617784] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 419.622810] ? security_socket_sendmsg+0x83/0xb0 [ 419.627569] ? nlmsg_notify+0x160/0x160 [ 419.631545] sock_sendmsg+0xb5/0x100 [ 419.635262] ___sys_sendmsg+0x70a/0x840 [ 419.639238] ? trace_hardirqs_on+0x10/0x10 [ 419.643482] ? copy_msghdr_from_user+0x380/0x380 [ 419.648239] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 419.653171] ? HARDIRQ_verbose+0x10/0x10 [ 419.657239] ? lock_acquire+0x170/0x3f0 [ 419.661214] ? lock_downgrade+0x6e0/0x6e0 [ 419.665370] ? __fget+0x226/0x360 [ 419.668830] ? __fget_light+0x199/0x1f0 [ 419.672807] ? sockfd_lookup_light+0xb2/0x160 [ 419.677311] __sys_sendmsg+0xa3/0x120 [ 419.681128] ? SyS_shutdown+0x160/0x160 [ 419.685107] ? wait_for_completion_io+0x10/0x10 [ 419.689841] ? SyS_read+0x210/0x210 [ 419.693528] ? SyS_clock_settime+0x1a0/0x1a0 [ 419.697942] SyS_sendmsg+0x27/0x40 [ 419.701479] ? __sys_sendmsg+0x120/0x120 [ 419.705543] do_syscall_64+0x1d5/0x640 [ 419.709437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 419.714625] RIP: 0033:0x45cba9 [ 419.717811] RSP: 002b:00007fb9df276c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.725518] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 419.732788] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 419.740055] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 17:02:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r4, 0x200, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r8, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3f}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x20000004) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, 0x0, 0x0) 17:02:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x4000, 0x1, {}, {0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x2, 0x0, @userptr=0x4}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:02:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x10001, {}, {0x4, 0x0, 0x0, 0x0, 0x3f, 0x0, "1c9d5a42"}, 0x2, 0x0, @fd}) [ 419.747329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 419.754672] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007fb9df2776d4 17:02:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x9) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b89d5a62"}, 0x3, 0x0, @userptr=0x3, 0x200}) 17:02:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) prctl$PR_GET_FP_MODE(0x2e) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xedabe183de02e74b}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004050}, 0x40) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0xc32, 0x0, @fd, 0x10000}) 17:02:44 executing program 2 (fault-call:11 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 419.959924] bond8: Enslaving bridge10 as a backup interface with an up link 17:02:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(r1, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r6, @ANYBLOB="00000000e60000001c0012000c00010062000000000c0002000080000004"], 0x3c}}, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="2b05000067000000b671f3ff56b2d546a67cb35ae950ef1954ad3a5898699595c7c6df33db125d5f03647e98beade1163e152ae94d081689a42f95397ff99541ab0ff6dcdcab9ad3db282900b4f71d2048cebb73bb69d726e4bcbf92c9ed5b13597572ee8b42b3f46283"]) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r7, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001700)={r7, 0xf3, "c4d80486c06991729c321cbeea6d049e0368a7cad7bbbf48f640b52e669a7e7a1967882d3fca29bd24e64eac26d43b658c9333aa2b29129954b3cd62faf91faf49fd85f28df6bf3b16743c58ed04c7cc44f0d69f2539a90c782ec716ab46609c46b61cbb242ffa90291e6dbdb47bc67358f702f35e320f5f0096b2feee5509dab2405015fd3b9f1571c38e73a121ccf83d56efb72c31a5852d9f46b7fbfd893569dea33b41a3aee51d1055272b9799b6dc37fed9240a6c4006b5868051f92258b380303fbb8ef177de1d41d34a0e6f820888fda4f2b4bf0aa7ebe4100a09e2674ba79f7b2c0680f3608629a3c20e20c8614fc2"}, &(0x7f00000002c0)=0xfb) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r8, 0x2, 0x6, 0x7}, &(0x7f0000000380)=0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r6, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x12a8, 0x13, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x7f, 0x2, {0x4e20, 0x4e21, [0x7f, 0x1, 0x4, 0x7], [0x8, 0x80000000, 0x9, 0x5], r6, [0x1, 0x5531]}, 0x1, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "65795a204361e95e449f2d0d198755371dcbb682684859e5d02b4823f89909fb5b2a167478a47601a0097dd2ef7e2f049f582ffe7709a270387d4c31a096eaf1ca025354f33326e69c3c16d6ec6b7e33c3aa29ae7b52e3aee995e206093ac863278ce136de92067068770a186c92e04d4d9194d6e32439a5e2a24ac8607172bc0177c2cc67a0ce5cb75bac829836274ad51501db1f4859289e8f27e6eef54dbd79f8ee72898a36d50e11a8cd240c5b3a87c1248899d5d6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "76f1059b12bf1df3f62bd54f0a493b14a5c30685c87df4a3076653db10e4a460f9eaad5a61a53f9d00795003584adc2d9b278bbc3d5c02353f1f355a8199cd85b6671a5bbb58446828e5c9474ad0d6e4"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "464dde4e9d5d0cfd8f44bb4c9ea51c897800abfe34346f5bd4e9aff91f4dca08824b192fa63e198a811e438bbbcf2d1d548d4b2c0101616c15822c03364fd4d6f03dd3605079c3aa98fca179cf289f215a3b17a706e202"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "65c158b528df612d6f5cd95cd2f8867700389e585283149885a358674d36afa233bf2f4ffdb480cfd8926dee778f408c9f1e557c9b1ca21e71473ac8ea7ed930d56f3657f7ec38b687ceea2d42985c5ec489f152d68c461a1dc7037e82e66e64e798c220577398984e3c23ee227183eff46c77ca73e786cb0ef4a02c8bcc756503613efa12b9f3d1b661238dd2d8e08fa25e9f737f1572a01b8d5a4e4e19aadf323d45826efae2d49edfe71158872ff30a"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "03bcff32ed018790a7e3dd25c838c17176d6ca9a0297cf536bcd6abbb360afc66e96d9bd109affd2b6691e9d5152688b"}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x20040811}, 0x80) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:44 executing program 3: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000340)=""/233, 0xe9) r1 = socket$inet6(0xa, 0xf0e0a7196f3b76af, 0xb) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000140)=0x3, 0x4) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000c00eb9a4d8096977295193abd8756614de83ac7fba014ec3245677dd8bac91d56c799adfe41c1f031ccbf6fb3cfa4340b374a0413191f57a2de7cfd58427d287701328903083e84d909000000c924ce6332f149085e03c6168c6b63c51f867e2e"], 0x74, r0) 17:02:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x15, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x2000, 0x0, @userptr=0x5, 0x10000000}) [ 420.122203] FAULT_INJECTION: forcing a failure. [ 420.122203] name failslab, interval 1, probability 0, space 0, times 0 [ 420.131027] bond8: Enslaving bridge11 as a backup interface with a down link [ 420.134228] CPU: 1 PID: 7317 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 420.148491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.158193] Call Trace: [ 420.160805] dump_stack+0x1b2/0x283 [ 420.164448] should_fail.cold+0x10a/0x154 [ 420.168608] should_failslab+0xd6/0x130 [ 420.172590] kmem_cache_alloc_node_trace+0x25a/0x400 [ 420.177707] __kmalloc_node_track_caller+0x38/0x70 [ 420.182653] __kmalloc_reserve.isra.0+0x35/0xd0 [ 420.187333] __alloc_skb+0xca/0x4c0 [ 420.191077] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 420.195967] ? netlink_autobind.isra.0+0xa9/0x290 [ 420.200821] ? netlink_autobind.isra.0+0x1c5/0x290 [ 420.205768] netlink_sendmsg+0x921/0xbb0 [ 420.209841] ? nlmsg_notify+0x160/0x160 [ 420.213827] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 420.217174] bond180: Enslaving bridge125 as a backup interface with an up link [ 420.218853] ? security_socket_sendmsg+0x83/0xb0 [ 420.218864] ? nlmsg_notify+0x160/0x160 [ 420.218876] sock_sendmsg+0xb5/0x100 [ 420.238776] ___sys_sendmsg+0x70a/0x840 [ 420.242757] ? trace_hardirqs_on+0x10/0x10 [ 420.247004] ? copy_msghdr_from_user+0x380/0x380 [ 420.251773] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 420.256719] ? HARDIRQ_verbose+0x10/0x10 [ 420.260797] ? lock_acquire+0x170/0x3f0 [ 420.264779] ? lock_downgrade+0x6e0/0x6e0 [ 420.268941] ? __fget+0x226/0x360 [ 420.272409] ? __fget_light+0x199/0x1f0 [ 420.276396] ? sockfd_lookup_light+0xb2/0x160 [ 420.280904] __sys_sendmsg+0xa3/0x120 [ 420.284717] ? SyS_shutdown+0x160/0x160 [ 420.288693] ? wait_for_completion_io+0x10/0x10 [ 420.293373] ? SyS_read+0x210/0x210 [ 420.297006] ? SyS_clock_settime+0x1a0/0x1a0 [ 420.301424] SyS_sendmsg+0x27/0x40 [ 420.304968] ? __sys_sendmsg+0x120/0x120 [ 420.309033] do_syscall_64+0x1d5/0x640 [ 420.312914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 420.318090] RIP: 0033:0x45cba9 17:02:45 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:45 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x482d07, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) [ 420.321267] RSP: 002b:00007fb9df276c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.328960] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 420.336217] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 420.343491] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 420.350873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 420.358218] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007fb9df2776d4 17:02:45 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r0 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x882}, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) keyctl$session_to_parent(0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010002508000000200000000000000000", @ANYRES32=r1, @ANYBLOB="27f8fff3"], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) 17:02:45 executing program 2 (fault-call:11 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:45 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x5c, @local, 0x4e20, 0x3, 'wrr\x00', 0x0, 0x80, 0x41}, 0xffffffffffffffcf) 17:02:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000340)=""/233, 0xe9) keyctl$clear(0x7, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xc80, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x1f4, 0x7, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x1a8, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@objref={{0xb, 0x1, 'objref\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}]}, {0x104, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9d}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xa8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}]}, {0x18, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x60, 0x1, 0x0, 0x1, [@hash={{0x9, 0x1, 'hash\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x73}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x11}, 0x440) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:45 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup2(r2, r1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000000)) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket$packet(0x11, 0x2, 0x300) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r7) r8 = getegid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r10, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010002000040000002c4351682135571ec675dc7b0000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040000000000000008000000", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08020100", @ANYRES32=r10, @ANYBLOB="10000000000000002000020000000000"], 0x4c, 0x1) write$P9_RGETATTR(r3, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x1, {0x0, 0x3, 0x1}, 0x11, r5, r8, 0x7f, 0x7, 0x3, 0xfffffffffffffffe, 0x7, 0x3, 0x5, 0x1a9c, 0x7, 0x6, 0x4, 0xfffffffffffeffff, 0x4, 0x0, 0x5}}, 0xa0) dup2(r1, 0xffffffffffffffff) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) 17:02:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x300, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd=r3}, 0xff00}) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x10000, 0x7, {}, {0x3, 0x0, 0x93, 0x5, 0x8, 0x7, '-U=c'}, 0x7ff, 0x2, @userptr=0xff, 0xf1, 0x0, r5}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 420.614875] bond181: Enslaving bridge126 as a backup interface with an up link [ 420.652661] FAULT_INJECTION: forcing a failure. [ 420.652661] name failslab, interval 1, probability 0, space 0, times 0 17:02:45 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{@fixed}]}) 17:02:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0xfffffffe}, &(0x7f0000000080)=0x8) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r3, 0x2, 0xffffffef, 0x800, 0x7f, 0x7, 0xffff, 0x45, {r6, @in6={{0xa, 0x4e23, 0x7, @empty, 0x6}}, 0xdc, 0x1, 0x0, 0x3ff, 0x7fff}}, &(0x7f0000000240)=0xb0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000000)={0x2, 0x7fffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 420.664875] bond181: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 420.694501] CPU: 1 PID: 7388 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 420.702337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.711696] Call Trace: 17:02:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x6, 0x2, 0x2, 0x0, 0x9262, 0x18c02, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x49d4, 0x5, 0x5, 0xfffffffffffffffd, 0x3, 0x3ff}, r1, 0x10, r2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x10001, 0x5, 0x4, 0x100c01, 0x1000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @offset=0x10000}) [ 420.714305] dump_stack+0x1b2/0x283 [ 420.717961] should_fail.cold+0x10a/0x154 [ 420.722321] should_failslab+0xd6/0x130 [ 420.726316] __kmalloc+0x2c1/0x400 [ 420.729950] ? bond_update_slave_arr+0xc4/0x6c0 [ 420.734638] bond_update_slave_arr+0xc4/0x6c0 [ 420.739274] ? bond_slave_arr_work_rearm+0x70/0x70 [ 420.744362] ? queue_delayed_work_on+0x114/0x1d0 [ 420.749242] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 420.754362] ? queue_delayed_work_on+0xfc/0x1d0 [ 420.759265] bond_open+0x69b/0xb30 [ 420.762900] ? rds_tcp_laddr_check+0x40/0x40 [ 420.767327] ? bond_mii_monitor+0x23e0/0x23e0 [ 420.772058] ? notifier_call_chain+0x148/0x1a0 [ 420.776677] ? bond_mii_monitor+0x23e0/0x23e0 [ 420.776746] __dev_open+0x1ad/0x2d0 [ 420.784820] ? mark_held_locks+0xa6/0xf0 [ 420.788974] ? dev_set_rx_mode+0x30/0x30 [ 420.793110] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 420.793237] bond181: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 420.798130] __dev_change_flags+0x421/0x510 [ 420.798142] ? dev_set_allmulti+0x30/0x30 [ 420.798157] dev_change_flags+0x7e/0x130 [ 420.820266] do_setlink+0x999/0x2d30 [ 420.820283] ? do_set_master+0x200/0x200 [ 420.828117] ? __lock_acquire+0x655/0x42a0 [ 420.828127] ? check_preemption_disabled+0x35/0x240 [ 420.828138] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 420.828152] ? trace_hardirqs_on+0x10/0x10 [ 420.846682] ? check_preemption_disabled+0x35/0x240 [ 420.846697] ? __lock_acquire+0x655/0x42a0 [ 420.846709] ? HARDIRQ_verbose+0x10/0x10 [ 420.846725] ? trace_hardirqs_on+0x10/0x10 [ 420.864355] ? check_preemption_disabled+0x35/0x240 [ 420.869366] ? memset+0x20/0x40 [ 420.872641] ? nla_parse+0x162/0x220 [ 420.876349] ? validate_linkmsg+0x3a1/0x460 [ 420.880671] rtnl_newlink+0x11bb/0x1720 [ 420.884691] ? check_preemption_disabled+0x35/0x240 [ 420.889854] ? rtnl_link_unregister+0x1f0/0x1f0 [ 420.894555] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 420.899752] ? __schedule+0x8ae/0x1d70 [ 420.903939] ? __mutex_lock+0x750/0x1430 [ 420.908103] ? lock_acquire+0x170/0x3f0 [ 420.912384] ? lock_downgrade+0x6e0/0x6e0 [ 420.916638] ? lock_downgrade+0x6e0/0x6e0 [ 420.920782] ? rtnl_link_unregister+0x1f0/0x1f0 [ 420.925550] rtnetlink_rcv_msg+0x3be/0xb10 [ 420.929928] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 420.934552] ? HARDIRQ_verbose+0x10/0x10 [ 420.938627] netlink_rcv_skb+0x127/0x370 [ 420.942887] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 420.947555] ? netlink_ack+0x970/0x970 [ 420.951514] netlink_unicast+0x437/0x610 [ 420.955860] ? netlink_sendskb+0x50/0x50 [ 420.960185] netlink_sendmsg+0x64a/0xbb0 [ 420.964342] ? nlmsg_notify+0x160/0x160 [ 420.968579] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 420.973778] ? security_socket_sendmsg+0x83/0xb0 [ 420.978529] ? nlmsg_notify+0x160/0x160 [ 420.982511] sock_sendmsg+0xb5/0x100 [ 420.986229] ___sys_sendmsg+0x70a/0x840 [ 420.990361] ? trace_hardirqs_on+0x10/0x10 [ 420.994716] ? copy_msghdr_from_user+0x380/0x380 [ 420.999551] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 421.004717] ? HARDIRQ_verbose+0x10/0x10 [ 421.008868] ? lock_acquire+0x170/0x3f0 [ 421.012959] ? lock_downgrade+0x6e0/0x6e0 [ 421.017144] ? __fget+0x226/0x360 [ 421.020810] ? __fget_light+0x199/0x1f0 [ 421.024886] ? sockfd_lookup_light+0xb2/0x160 [ 421.029382] __sys_sendmsg+0xa3/0x120 [ 421.033181] ? SyS_shutdown+0x160/0x160 [ 421.037292] ? wait_for_completion_io+0x10/0x10 [ 421.042138] ? SyS_read+0x210/0x210 [ 421.045873] ? SyS_clock_settime+0x1a0/0x1a0 [ 421.050282] SyS_sendmsg+0x27/0x40 [ 421.053817] ? __sys_sendmsg+0x120/0x120 [ 421.057871] do_syscall_64+0x1d5/0x640 [ 421.061853] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 421.067073] RIP: 0033:0x45cba9 [ 421.070255] RSP: 002b:00007fb9df276c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.077956] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 421.085221] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 421.092600] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 421.099952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 421.108476] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007fb9df2776d4 17:02:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 17:02:46 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @planes=&(0x7f0000000000)={0x5, 0x200, @userptr=0x1, 0x3}}) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000000c0)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000040)={0x8001, [0x8001, 0x9, 0x2, 0xd642, 0x2, 0xe5c8, 0x200, 0x2, 0xff, 0x4, 0x7ff, 0x9, 0xb8, 0xf001, 0x0, 0x81, 0xf3, 0x3, 0x40, 0x4, 0xffff, 0x6, 0x0, 0x1, 0x3, 0x5, 0x4, 0x20, 0x1, 0x2, 0x48, 0x0, 0xdaf, 0x5, 0x4, 0x81, 0x1, 0x8000, 0xfff, 0x1, 0x7f, 0x1, 0x3, 0x3, 0x9, 0xbd1c, 0x8, 0x8], 0xa}) [ 421.119487] Failed to build slave-array. [ 421.125148] device bond181 entered promiscuous mode [ 421.130356] device bridge126 entered promiscuous mode [ 421.137967] 8021q: adding VLAN 0 to HW filter on device bond181 17:02:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x68}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:46 executing program 2 (fault-call:11 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:46 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000002000000000e08000a002de294855fbd0000247a0af09d125c99433ddce298cf550563c513553e6b2e1c209ea8f50719732c0ffc92ab23f44d2ea664deb707", @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) recvfrom$packet(r3, &(0x7f0000000000)=""/218, 0xda, 0x1000, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:46 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x420000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={&(0x7f0000000000)="b6dcfbcf0c30ef875a4978b9632f07221f099b4c", &(0x7f0000000240)=""/4096, &(0x7f0000000080)="36bdf5850ecb2b9b176c09c84f4310c3eb21c90f949da48f1a6d172145d942377d9401e1bbb15da74873561c43981d2a56c7328d7e828ebf02331017e5cd104031c24eef8c1a749075e5ee1268bc96e413f5e17ab06b232590cb5aa30be51a3368e357aef0fd03bfd9dc38c66b107476db019ed146438a2be2950a91a11aad43a60d402acc90168cea8f8a899e0bd003b5b72d7fbb8c778c5c0beb7c8fea48464fdf32e8ce7fc3528cc0e39265cd4c227635ca1395c6982a301a20da66d4", &(0x7f0000000140)="7b99fb790e3f2b04567618891ef7c2079f805f789a7635d34f2b69c034e460a0a3dd10a81afa32da48aaaffd2b82a0c3c50837eafc8861eed9d4d6e7c4655ea1c77e5c624619c9004fef671334bfaf960d77621ac0f2ad757ac2ad552298b9715df58e6dff8a9b5655a410a25f976d", 0x0, r0, 0x4}, 0x38) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000012c0)=0x1) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000080)={0x400028, "30f505b4df548707939490edfcb4454090c9fb8c262cce9a47342be1496eaefb", 0x3}) 17:02:46 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e92000"}, 0x0, 0xab5493626fe5baa0, @userptr}) 17:02:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x800, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup2(r2, r1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r5 = fcntl$dupfd(r4, 0x0, r3) readv(r5, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000380)=""/118, 0x76}], 0x5) [ 421.415589] nla_parse: 8 callbacks suppressed [ 421.415595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x5, 0x8}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000002c0)={0x2, 0x6}) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000240)=0xfffffffffffffff8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) statx(r3, &(0x7f0000000080)='./file0\x00', 0x1000, 0x100, &(0x7f00000000c0)) [ 421.516371] bond182: Enslaving bridge127 as a backup interface with an up link [ 421.701102] FAULT_INJECTION: forcing a failure. [ 421.701102] name failslab, interval 1, probability 0, space 0, times 0 [ 421.707331] bond182: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.723546] CPU: 1 PID: 7471 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 421.731364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.740811] Call Trace: [ 421.743420] dump_stack+0x1b2/0x283 [ 421.747064] should_fail.cold+0x10a/0x154 [ 421.751234] should_failslab+0xd6/0x130 [ 421.755221] kmem_cache_alloc_node_trace+0x25a/0x400 [ 421.760337] __kmalloc_node+0x38/0x70 [ 421.764211] qdisc_alloc+0xa1/0x550 [ 421.767852] qdisc_create_dflt+0x59/0x150 [ 421.772011] dev_activate+0x5f0/0xa20 [ 421.775826] __dev_open+0x201/0x2d0 [ 421.779465] ? mark_held_locks+0xa6/0xf0 [ 421.783535] ? dev_set_rx_mode+0x30/0x30 [ 421.787600] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 421.792622] __dev_change_flags+0x421/0x510 [ 421.796949] ? dev_set_allmulti+0x30/0x30 [ 421.801104] dev_change_flags+0x7e/0x130 [ 421.805171] do_setlink+0x999/0x2d30 [ 421.808895] ? do_set_master+0x200/0x200 [ 421.813046] ? __lock_acquire+0x655/0x42a0 [ 421.817370] ? check_preemption_disabled+0x35/0x240 [ 421.822413] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 421.827351] ? trace_hardirqs_on+0x10/0x10 [ 421.831589] ? check_preemption_disabled+0x35/0x240 [ 421.836611] ? __lock_acquire+0x655/0x42a0 [ 421.840856] ? HARDIRQ_verbose+0x10/0x10 [ 421.844930] ? trace_hardirqs_on+0x10/0x10 [ 421.849164] ? check_preemption_disabled+0x35/0x240 [ 421.854184] ? memset+0x20/0x40 [ 421.857470] ? nla_parse+0x162/0x220 [ 421.861186] ? validate_linkmsg+0x3a1/0x460 [ 421.865515] rtnl_newlink+0x11bb/0x1720 [ 421.869506] ? check_preemption_disabled+0x35/0x240 [ 421.874014] bond182: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.874525] ? rtnl_link_unregister+0x1f0/0x1f0 [ 421.888469] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 421.893437] ? __schedule+0x8ae/0x1d70 [ 421.897328] ? __mutex_lock+0x750/0x1430 [ 421.901407] ? lock_acquire+0x170/0x3f0 [ 421.905475] ? lock_downgrade+0x6e0/0x6e0 [ 421.909748] ? lock_downgrade+0x6e0/0x6e0 [ 421.913898] ? rtnl_link_unregister+0x1f0/0x1f0 [ 421.918570] rtnetlink_rcv_msg+0x3be/0xb10 [ 421.922809] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 421.927309] ? HARDIRQ_verbose+0x10/0x10 [ 421.931382] netlink_rcv_skb+0x127/0x370 [ 421.935453] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 421.939959] ? netlink_ack+0x970/0x970 [ 421.943865] netlink_unicast+0x437/0x610 [ 421.947935] ? netlink_sendskb+0x50/0x50 [ 421.952096] netlink_sendmsg+0x64a/0xbb0 [ 421.956167] ? nlmsg_notify+0x160/0x160 [ 421.960147] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 421.965171] ? security_socket_sendmsg+0x83/0xb0 [ 421.969930] ? nlmsg_notify+0x160/0x160 [ 421.973910] sock_sendmsg+0xb5/0x100 [ 421.977716] ___sys_sendmsg+0x70a/0x840 [ 421.981694] ? trace_hardirqs_on+0x10/0x10 [ 421.986025] ? copy_msghdr_from_user+0x380/0x380 [ 421.990793] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 421.995733] ? HARDIRQ_verbose+0x10/0x10 [ 421.999807] ? lock_acquire+0x170/0x3f0 [ 422.003789] ? lock_downgrade+0x6e0/0x6e0 [ 422.007944] ? __fget+0x226/0x360 [ 422.011410] ? __fget_light+0x199/0x1f0 [ 422.015402] ? sockfd_lookup_light+0xb2/0x160 [ 422.020057] __sys_sendmsg+0xa3/0x120 [ 422.023862] ? SyS_shutdown+0x160/0x160 [ 422.028105] ? wait_for_completion_io+0x10/0x10 [ 422.032814] ? SyS_read+0x210/0x210 [ 422.036459] ? SyS_clock_settime+0x1a0/0x1a0 [ 422.040875] SyS_sendmsg+0x27/0x40 [ 422.044422] ? __sys_sendmsg+0x120/0x120 [ 422.048501] do_syscall_64+0x1d5/0x640 [ 422.052404] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 422.057596] RIP: 0033:0x45cba9 [ 422.060785] RSP: 002b:00007fb9df276c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.068591] RAX: ffffffffffffffda RBX: 0000000000503800 RCX: 000000000045cba9 [ 422.075889] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 422.083168] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 422.090442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 17:02:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 17:02:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x8000, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x80901) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x1f, "9c5cbab9c8711a610607082afc70ad050e61a6eb81730e60e4e2294fb7804962", 0x1, 0x6, 0x40, 0xe0, 0x2}) 17:02:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80, 0x9}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3ff, 0x4000) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x0, "4890a29d855c4bf59f1bb924006d12a3246587f8d54dc30ae2a42cba76c8106f", 0x4, 0x2, 0xc0, 0x8, 0x1}) timerfd_create(0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 422.097718] R13: 0000000000000a6c R14: 00000000004cd48b R15: 00007fb9df2776d4 [ 422.158475] bond182: activation failed [ 422.162741] device bond182 entered promiscuous mode [ 422.169757] device bridge127 entered promiscuous mode [ 422.181699] 8021q: adding VLAN 0 to HW filter on device bond182 [ 422.199318] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:02:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x100110, 0x0, {}, {0x0, 0x8, 0x0, 0x0, 0x81, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 422.215698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x4, 0x2c0200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="000000fd17ef40001c0012000c000100626f6e64000000000c00020008000100042d940dab31c0ff587099f67eb17ef9e6c70cbbc661f5b43da3ddd1ff943bef1a5b074a57a42b8c1db4a854eb8df20b8863b5c70f4973d760c26a199c42f9039889670f5bcea71564090b230c4275a25bfb3063dc2308f63a3460a5ea86af8a3155b2ed2711e0494755c6a27505f47767c2423ff98ff858420820dc8158843a5ad1b32265d12a12016ead567ac75f4c80a24065ea85f25bae64accea2680b39130d1b1a30a061a8473b66421c6305786c17c95ddad99be4a68140cfe5ecc48372c1ee37f613db9d5c26f4de7a555c9d"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x9280) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000240)=0x100, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000250800"/20, @ANYRES32=r8, @ANYBLOB="aa8a6c890fe72413"], 0x20}}, 0x0) 17:02:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x0, "d28cfcab42c81bb181505abcdaadc4f306f63d01fd8dbdbe014619c6c0679865"}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86800) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r4, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8200, 0x8, 0x10000, r4}, 0x10) 17:02:47 executing program 0: socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000340)={0x9, 0xa, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x4, @planes=&(0x7f0000000000)={0x0, 0x5, @fd}, 0xff00}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x81, 0x5, 0x2}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x80000000, 0x8, 0x4, 0x20, 0x0, {}, {0x5, 0x2, 0x0, 0x1, 0xf6, 0x7b, "eaea00d0"}, 0x0, 0x1, @offset=0x8, 0xfb01}) splice(0xffffffffffffffff, &(0x7f0000000140)=0xfef, r1, &(0x7f0000000180)=0x1, 0x7, 0x6) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x25) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000001c0)=""/17) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x10000, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 17:02:47 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000000)) 17:02:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x5, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x3ff, 0x80}) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6d00000048273d1345b2ab1326df8bb7075b0d686fb38c43d7f83de275c9cbd497aff6ab34090e533ee8058161aa458dc8b23077cff82462e93c3ab9dcf97dee4107a1c8a2749d943843280ac8b8afa81f00232ef6c20b3fe5de9dc4357b7d1f5865a01ada467c68a3110338e7b06b0282eefc79f4ce26a1a38d33a4c630dff4f8", @ANYRES16=r4, @ANYBLOB="020025bd7000fcdbdf25020000002800018005000200080000000600010006000000140004002001000000000000000000000000000208000200080000000800020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x8800) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000140)={'wg0\x00', 0x2}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r3, 0x7, "cce78b", "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"}}, 0x110) 17:02:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0xfffffffe, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="d1000000e3993afd8c6b24a11452d51e8ced0fb7ed3c8ee581677a668ad05c3b9af5bf8ae25dfa5821a2d18f5598ebccd643ac526875463170a4d028299a626b8f8294b807d8b89d81e34c4078da3c726075a1680b97b02ed3ecde8ea0a0f3e72ac6f3f52f87bb734d5f7db13ba3b71b7a93ea2b691b0d1beaa7d694ad2c14a60f6e40ca8b315ead8298a9175ad7da7fb6341d3fd58098fa8ba1cb777131b41f613f5e1ff7de9e1e311ea2eac9091d2ea8d4714d3b93f42da915581d2ce82bf16362db009446fd861b24db1f17536b92bf5ccc37ba"], &(0x7f0000000100)=0xd9) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) dup2(r3, r2) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0xfe2, 0x2b, 0x5, 0x5, 0x9, 0xfffffff8}) 17:02:47 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r1, &(0x7f0000000000)="a1164553223eaac7ce3025d9", 0xc, 0x10000, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) [ 422.479587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1, 0x2, 0xfd, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @userptr=0x29, 0x80000000}) [ 422.549980] bond183: Enslaving bridge128 as a backup interface with an up link 17:02:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:47 executing program 1: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x0) 17:02:47 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'batadv_slave_0\x00', {0x2}, 0x30}) 17:02:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 422.677535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.741588] bond183: Enslaving bridge129 as a backup interface with a down link [ 422.756952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 17:02:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x4200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x2, 0x5, 0x4, 0x10000, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "1c9d5a42"}, 0x4, 0x0, @fd}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000001500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20040070}, 0x8005) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r2) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10, &(0x7f0000000180)=[{0xffffffffffffffff}, {&(0x7f0000000140)="2cf3b1e3f634f2d08c905242d5f76a9ea6ff89e4e7a294e70b2b776bee109d7d8c811fa367fe30e73e5c462c99aae88b9a7cb9c070ed73c0", 0x38}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000240)="b9f023fe8712db4d1d459fa8dcbd6f7cf5d212ad2e0cf7028b2b719e56de447bec7198df7511d657cc668be79742f28612e527f892a83f9123ba9319310ddbb8b14cc039c692de03509d83450ebdb23473f73bb76316e530fc9943ffb7622f71591ae85ccc38c0b9d81fe00114b6f957363989409e4f13eb3ce48ca75adfe37ef144dcc51d6b84db3c249e5f", 0x8c}], 0x4, &(0x7f0000000300)="58ed19f09445fd3455eb206e3148ade3fda2256cd08c355dae22165c10464021457cf1f1332a52335b7da0bbb07e04874ee51ff07e712c006d12a5aec8cf0372597c3a3e015e260159b66dffe6de7b7f40f54a3e8a808b2d", 0x58}, 0x4000010) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) 17:02:47 executing program 3: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0xac440) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {r1, r2/1000+60000}, {0x4, 0x0, 0x4, 0x0, 0x0, 0x1, "1c9d5a42"}, 0x1, 0x0, @userptr, 0x4, 0x0, r0}) 17:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010010000000000000003000000800010", @ANYRES64=0x0, @ANYRES16=r5], 0x3c}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000380)={0x0, [0xffff, 0x4, 0x300000], [{0x7, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x1, 0x1, 0x0, 0x1, 0x1}, {0xfffffffd, 0x5}, {0x400, 0x5, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x8}, {0x2, 0x7, 0x0, 0x0, 0x1}, {0x4ef, 0x7, 0x0, 0x1, 0x1}, {0x4, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x800, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x1, 0x1}], 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 422.795801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.807208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.834832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.866807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.898313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=7664 comm=syz-executor.2 [ 422.914457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.914514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.914519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:02:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @offset=0x4}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={r3, 0x50, "444ae286b5eca23279d1873ef1496dd48ebb3ef396135f96c00a1b528f3b4a94419a843eb7e53927ce117d4f836b2bccda3201eb2f1f1eaafb06a5c5a923bf8061054b4fd937552ebe02482cced9c1d2"}, &(0x7f0000000300)=0x58) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={r4, 0xff}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x404000, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000240)=0x8) timer_create(0x1, &(0x7f0000000000)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000140)={{r8, r9+10000000}, {r10, r11+10000000}}, 0x0) 17:02:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 422.914534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 422.914538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.950720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x4, @offset=0x48}) 17:02:47 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, 0x0, 0xfffffffffffffe06) 17:02:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140a, 0x800, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200001f0) clone(0x610c800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fsync(r2) ioctl$TIOCSSOFTCAR(r3, 0x40096102, 0x0) clock_gettime(0x0, &(0x7f0000000180)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x81, 0x0, @fd}) [ 423.085114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=7669 comm=syz-executor.2 [ 423.112178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00001610000d0700000000ff030000000000109057cff366b6f1bee7a3d83c8c1ce5fbdd4661cff06575056976a55059932a1bdda17f83037315c499d26432b90187b531f91840349ebd0d5ac2952bf3c057", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x182, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_newneigh={0x24, 0x1c, 0x800, 0x70bd28, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x0, 0x8, 0x10, 0xb}, [@NDA_VNI={0x8, 0x7, 0x8f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:48 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 423.193416] QAT: failed to copy from user cfg_data. [ 423.227370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.268125] QAT: failed to copy from user cfg_data. [ 423.339862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @fd, 0x80000000}) 17:02:48 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x103c00, 0x0) write$nbd(r0, &(0x7f0000000140)={0x67446698, 0x0, 0x3, 0x2, 0x4, "e164a9413881a04a363ba8a6345600f921c0e9fea0015a59be8d8a81da0b61a407e5077fbe6db4a4afe4b1b3af0d3b7663c8971688f76506505495e56137ca08d7cce80d5b0dd00bc3d0044060e49b0a92563cd69c0a0f05c2079e6ca2c7c9efeee20f6de9491457069ef9cd690ae597e69b4e4be3e727188fd1563cb33fce2768311e02ad89adbbe3a624b71d47a94f0445fdac24eec1702fd03b16d389d5d168ce56df07c460e910b154c953f84e7c318a"}, 0xc2) socket$rxrpc(0x21, 0x2, 0xa) rt_sigtimedwait(&(0x7f0000000000)={[0x5b87]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) 17:02:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="dad2d3812868a9cb4e11d0641233051029990cfb4244e6daa5ab573d52508145c17d93c752a0daaa5993ed24b81b596aab30fc656b6c21c3f03ef5c1b2f50222f59d8f0ea3cfc97bd4cd4d3cf1a415fecc6ba7e13ee038f6a00ca0c880eeeafb4fcfd5cfd84b05f953f295fefc1cd6006267b89fc2a500e52a8b067ba9a2c6a67a54e464ee16e786be93e3ba924c3dfc4a0afa57f00fd5b3d4e3916c8c853f00d0e5810f4d1ac8a777bb3fbb97ed565a5e48ce755cf370122a7eed30301a4596238d7d9c1b655b0e60f900e6e01a32c00b2e3ce42e", 0xd5, 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) socket$caif_seqpacket(0x25, 0x5, 0x2) 17:02:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x48) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000000000080400"/20, @ANYRES32=r5, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:02:48 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x18000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300049f94fac4262b67564726f707300000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="8789fce84aea89e7027ea4dc07e1bc5300d56fffffffffffb801c062f733", @ANYRES16=r2, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x4044840}, 0x24002000) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) msgget(0x1, 0x41c) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) syz_mount_image$minix(&(0x7f00000003c0)='minix\x00', &(0x7f0000000440)='./file0\x00', 0x1, 0x8, &(0x7f0000000880)=[{&(0x7f0000000480)="4b10898f", 0x4, 0x6}, {&(0x7f00000004c0)="2a9b0f41bb1bb9826d5ceb7a2542ac597421de1d8251328443baff31b8ab4ef091ddc0eacf8da2cb82482dbb7c698bf7d2d148bd13ae9342808a7ea32106e5011ea270c24e7ab4ec758ffff457b107130680f2ca12c1e79ce0e14631fc453897a5446d4685afb12064d73f212fdd184b9b50c91aa15d419977da844f1e410f8ae9c019e0ebdc9c22431dc8b0ca725fbd1bbf33d3da8527e34df8b5e2ff460f71ef7b9b", 0xa3, 0x7}, {&(0x7f0000000580)="2b278d85498c2b0c7d5a6515ef175c3f6959baccd85c3d4c4e51ae33ce4476b05ea09dbe0af6632d3b58cda9604263e0a02937f34b27918ef44a666adfafeb3ec168ed9aacb1ba223f5920935acbe82cb052671e8c1e4b799b88b68e9b6f456d1563c94452dd3ba7823c28b1699fbcd77d48db384d17b419869bc86da726f596fc9537d23eb828c43a3896e82c86f9b7d8c02c02046fe0414f", 0x99, 0x5}, {&(0x7f0000000640)="dce450eb1b953911a7a8da5e32be8d8921e6a5d5b1373aecec18c469527cc5c231e6ee5d1ed41e45d57df63a0b1c4be54b09c9d4c72afe93866e11ad8e8acd028209ab21d5be7d6a838c4e6662c5a783c89416325b3627877a054cf4bdb158c41989c2c28344f6d0d4940c81bdcb2a60324368bc341edff3337f08fd025c378012ce342eb987b831096588eb84e4866d0a65e2fab84754665b5d2fde4448025f7524304a2a0c70b863", 0xa9}, {&(0x7f0000000700)="2ed04ac16ef845b8ae3bc2373c728ec900bb3318af570257bb5aebfe0285175f0ac011cc35235fd4d9d09e714920fbc2ec67b784970b17b6a39ec56c6255347e516b34ab3a9a01bd59c0d97b98b771a154a250fa4cdde91daf534b340a4effbbbcf80ab88f4630485263c493e19f1a79044629522e2658180a6f69f7ee9637c5f4e9923c4eb0b1df30a40b98068d6478a1c7", 0x92, 0x6}, {&(0x7f00000007c0)="9a1ca4f00e154ca5a40f9122f361ed2dd1070352d854a6781f451d4661b619528dc633909e929ff616cefa5a298964175a43bea121a3698161218108d06ea90ed4dc49977a36bccf311043b8a248d211", 0x50, 0xfffffffffffffff7}, {&(0x7f0000000840)="d4d842b7d307883935e356c29240b842756b40bc19870cec6d23678bf9a5", 0x1e, 0x3ff}, {&(0x7f0000001340)="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", 0x1000, 0x200}], 0x2810008, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f00000002c0)={0x1ff, 0x7fe9}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x840, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000280)=0x10001) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 423.745558] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 423.756976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7778 comm=syz-executor.2 17:02:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000100)={0x1, 0x7}) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r7, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r7, 0x37, "08a724e99f871fabbe625db5609d4c139b840cce113f01220ef27f0fbdbf12372b193484dab325bb520b813a845f9ef1e8353dc3439339"}, &(0x7f0000000080)=0x3f) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r8, 0x7ff, 0x7}, 0x8) [ 423.808537] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 423.812453] bond184: Enslaving bridge131 as a backup interface with an up link 17:02:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xedabe183de02e74b}}, 0x20}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r7) r8 = getegid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r10, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1, r7}], {}, [{0x8, 0x0, r8}, {0x8, 0x4}, {0x8, 0x1, r10}], {}, {0x20, 0x2}}, 0x4c, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in=@rand_addr=0x64010102, 0x4e21, 0x8001, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x2c, r4, r7}, {0x55c0, 0x1f, 0x0, 0x7, 0x3, 0x80, 0x71}, {0x6, 0x200, 0x101, 0x466f}, 0x81, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x34ff, 0x0, 0x0, 0x7, 0x1, 0x7, 0xbdd8}}, 0xe8) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:48 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000140)=0x8, 0x4) [ 423.929898] bond184: Enslaving bridge132 as a backup interface with a down link 17:02:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) read$usbfs(r7, &(0x7f0000000380)=""/80, 0x50) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="218f00d8da", @ANYRESDEC=r9, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) [ 424.045597] bond185 (uninitialized): Released all slaves [ 424.067152] bond29: Enslaving bridge133 as a backup interface with a down link [ 424.156182] bond185 (uninitialized): Released all slaves [ 424.171248] bond29: Enslaving bridge134 as a backup interface with a down link 17:02:49 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) fgetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)=""/253, 0xfd) 17:02:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 17:02:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd, 0x4}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 17:02:49 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140091b5004a700000010a010100000000000000"], 0x14}}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4c400, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x3, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xc78}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008011) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000300)={0x101, "be698476ed1a34e4e4d604033e4a1a789c8e8a3cd9f42a7565bd93c7d80d0b09", 0x1, 0x3ff, 0x2, 0x2000, 0x300, 0x651a65f390561814}) 17:02:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x51b7, 0x5}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:49 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(r1, r0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80800) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = syz_open_procfs$namespace(r6, &(0x7f0000000180)='ns/pid\x00') kcmp(r3, r4, 0x3, r5, r7) r8 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000080), 0x4) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, @userptr=0x7fff}) 17:02:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:49 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x400000) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x40814) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f00000001c0)={0x137c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1348, 0x3, 0x0, 0x1, [{0x1344, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x98, 0x1, "783bd3ed443adef255e7530b7894a22f7ec83d77f53b3b4018f88620212cefa88f74f92f31c47a4e47180daf64e7a8b2fc587555e571bb8e050b490d449820402152f3cc10f7bd281a97db368267116663c15dfcda1af58030ccc6e6efe2337b5134b80ff475e4bed95a8657db7a42af0f47ff63ddfeea0f94b9c44b36e2284340b612b5d3a7d6fbe0322cae43393caf3aa6adbd"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "5fdf1943b4c2e4d330e9f68e02a90fe001f1bf700949530cf4816c33e6fc9e73757d07d2993cfe858c50b6fd29824ae728295db9653019e47786563cbe31710198b95f24e0ae7f62942f7f61e4a29d8ea73a765d9570223f4a10f4aa4359c97cf02af4e398b43c740093b7a3e19589cfbd8ee233e7f240060348ae324351fd88a1b8c99f47ca89e9251e5ea2a670f32599c9a9cd7cc988b9cbf2285f284797c734d531e8d11760b2011f7fdd30eb4c53487fd43997d8b6acb11bb6badbb3f1dad82862ce5d36e79e85026f1b683beb9d4dd77673a77ade145be22ce76994ad8274e67d53349f7fb4d2983fccec0255c83b0a7381df70a987452fad34d0708be1042e07556f0d69820e0ad0e4cb56128635e4678ac19d63e81216ab84d610b688247f848b754096b2f3d95acb84c5b378e213089ae65344650aac264935de99f5d6e7b7cc2dc8a17e83a1135a6a40a7541240aa8b54193fc1a002e11a4b5f8461e4865b3508c81ee8facd2286e6ccbbb22d169e5d4ba83aef87952e323428507524c27d10097c6a7cd9f18ce81135a7e5dbad305e42774952269d1499dde688ebabb9ebd6bd2459fcb3fb23ecd9768fafd5e43919918413b9275605f098bff1579c56c46d5ad7f909a07e2cae7704cd88b50fabcae0c399a8fb81dc8910e86bb86334c758a723cb13cd6bd6a1cb276e0809ccc1f896e3afc7b436763db7fc970f8c874055a923b15f9afa03550acb51be0db37140921f481030cc206b864edcf865618b776aeb12ac75f473d5b14101607491d4dd2f0857187ee214731d2f58653f8bd4140245a3fc58f4a01edebaa6bb61f9def5fdf1b5aed00e3103f1a9c706332c835f4e38ec70ab9690e4c45b3f8552a3f6657e5cd4136a660109828540303034e8379a4a2dc7403e9358b57f0f789e817ce3412361e202302d4a1a82373f9f3ad1100dc1d9de82a6fff83c7a752f2522178147df64a40ca7a66745a3f380dacac7d1cdcef9144cdff9e786228eafe67e89ab5f9adefd514fb16f00758c6f407faff2946aacbfc7592482f9030d05820d0143222fdc9705f6caffe962efa2dd3bb4930ff695b0e63313a628034fe08f61c1d72e5fd0637b50b5df08fba52ae77081cf7779becd129fe789a671eb29d0dbd533f149ff6e8fa2dcdc695ec37646f2e4097daebc29b1beaf017673f7946fb20cb385abcde82c0628708e6a9baaea684f4e026774c4b8a1f2fc5a0430fceb9bb645fcb121fe87571a67f47ae46404d72f6ca6150ec8ecc43285cf36fd234438cecf8adeaf38746787c9374e74e660564ea9abe3a1e483158a988bc1d64a7f49c526294d837ae063c14a57c0dc59b681571f4965c85e722f2e8c33015620967827137a08be80aa7b112e0fd697b371638f9328ca16b7eedd37c2a5a75a671c71def16adebcd35ddbf3016981efb9bf6ee3be687c2c909228e3a3767912c4861754461823b0bd07ec23ac661a5beb3653ce1baf286870e2a7ff2ce3d6835b3a923a62921122ba4fee28f871122a4f5d98347c56bd5ccdd96644a704d867cd4208ea7aec2c76705f27fb66fd0d82841caf08b5d7360b67e3305c333ce028a95d5ca9e16d4b77a490d90c794a36fd965e761221300e5e97f3fa2ccba8f5db58f5d9b45e74fd2e8dab013750b4279b3cae184dd0142edb082c14856683dd0ad5df3e4b4b9b609172f3b4197c4152c80a7603a8135f16bd2f10714785a596462efdade7d57c1d7832c57338b111733286557fb0c15da8cfffbf3dd3c7ad1f4f3635ee46d0b689ac19e71c285244dce7f9a2ee82ecb343bc3e795cd3307cdeb115dbd7ef2b9ecc203937389028466afaed8e4ee922141137fc9d00d3a9cef4c9416ac0ff2eb68d25b9bf9317ffa16f45c4dbe985cfcc3fd1e914737122fb7f18ac5d5fdc57ab335462c3a3652d0af47a4408f79cf97182dc5da372ce24694cee12e5dd863715a79986b7980f642ee20b1019df2b215b2c188a437762b3eb3660cd7233a9046a307cee39cfd7962a6b6c224adae2320d3027df4b5a02adc3acbc0aefbbccd27ce116070f558514d11f88f43e2e8d4eb20f244a13e6b17480724fb3a52d49a4c5801444872bd83b0089fb4b052c198dea8be565f6f7f907e70f9776bf244f3b9f0de0436646060a152105af8c8398f1b3586e302f72b4b3141b2767426714ac3936be9da13ba72af05938689732f73890662a936865c5c32a9c8a9165b661632ad392e178af2fe38066a83aa5f95327f8cd451497f756bca7fcd76135b9daefad88122fc50775dba4eb38d81a411e44d4d7c3e78ba647dca71db9015c5c3db41d213fe349c61f343ec4382465b4f9365f7d187b2eb6c4f23bb23d45a25441bd327ee667796c6fd4c61586be66a6af00c1c7fe55547d77dc6e9238ae2a3454cf5e83a1860747c000bb4630d8b9f770a3088748f9376b88c1f5fac8e550e710fb992ab4b5241f5ffcab7d08ad2ab84e7ab32417073fb3f78031dbe2f025ba8b8e8b181890662e48ae2f824b458e0cf563697b150d57ebad8ae81ff6e4eed8cf345245ca61e449eff606dd269d6beb7b74c2f766ce0ee8c04dc1378735157e0873550999f006a116d7375c23e0101677bf0bf9d2511e4c76dc02cf9cdd29ecca09b1a5e72d30bf4a9b998ef5794fb7a58d336ac78c8c9837f2b9550014af096cbc11f410fb201bcf8d46a10a4750457f52c6541edde41d70ed290706a3e465e2afc48537d70f45b666628076192f28230dfc0467fadbea8e6b54dec1e31d42fe5b341529c1f9baab82d1e9d640a5c72ec5513be144f9d66b294da95816b6402e854ba20e009147cfb6a3000ae2c57b096c27b2b4f72c87d34a320c4b7ae1d4bcb9aa301251d7174a22ec9dfd2dca07ec98bfb2f863ea69db0b5aec8c3a005bde714580832462dd007ea9701335137b2682447790dd4795be6f685590cbcab48f41f4d63bedfae724c0d7bd828d612f0cf3fe3b6e90e700a8fde6ced3e2055f5217ccec3c389825578bfe087f2960c2dd7e621fd516a0e5735eb6c0f538e16463dfc4f10768c733c3284bf2be9847a641fc233c887961e6defa2ad13270fdb1a9a9255936968c1400f053d142ab9d378ddb7d099acecf65025d6239e2acd30917d1960f332c0251c532578cb6db243c86d233f7fcb4684096529f8aeb339de37b4ce7911f2b0b190baaee85cdbecbaf778e03631e3cb756390a69e146ac3606393bea0d1a2d649c5c995fb9cab12191d47d80a88666ce4ff4b8b4254b28621fd64b1c603900aaab6996528bc5453271fee7f98d7aba8feb9ef5787156641c2476c0acf82cb5fda69169ed7003bb83192e43650cde7ba1f168559bb9ada747ecbd980c17ccd5be2faed880321462eefac3bb93e1f9942445af3faaf5ed6d012ff630c32c81ba608fdb7a3bdc5e60235dd825d62ac0165187818560d327d3174f199706bc2c8f1a78bd16564db143877570b5a2f8ab54e302f103c0f0ae6c9767413e816437ca8e1a009ceb58b2316479974b3b5d9bbfc53a447f8858a065e591f897c743f31dd038cedcf3aad23b781c3542a0056e04487b0635b2f429b224ae5e3b143a3b2d826dbd9c8be0fa75d45a1436405208f618f208b077209de8f320ec0993aa6a7f2079d1c5a28b66f1ef90e52886fda533d716d4b640aaa27b8661f74a89078e0c025fa242f682541be025909e7261f0593cd0f1c47538ebe48f3fd2d973785db693eb1454f299e778af33857d4b057ab73e9a3b09c40c6d15bdcd6c083c16065c7124c458b0be2a01e928b13aa85409c8501efe44cfcca82914b39ecdfc1218bafd75485842e3608902234318d3754d138fc376a4e52a30b6a3d98d3da1df30447a3a8def0b3f190f2e75e6a35e577bd7b00178b75ce0909496c8585c3c42c662f38963907146f0e70b268e1bd44fbd5403ae32f8ad261bd0ed21c65b9bd69cfa18496c5a06f5a0c7eab18adb45ae090a9384ca20d56d8cce7fec2cab45747f0b47de245f3d2efcc2247af21f01905ed3bfb7cc714f8dbe03d46bddccb9a629b04ce2c1c33c0e696d2afdf0fbada84445623b6a0b233c2f8b2219617bac8c8f54f69969507e40ea0c7564bd5382f9df2b0588a4c87a3ec24997867ea1dd84062562a8318d9489529f87bcb46696b6d1954710193cca0722472560e85e32d409076fe287ebb5d3872c4243f604d9db8eb9ac66cbe312f08ba775c0bb502fa04a0b433d9bf6d7f98c1eb16695201e9a7455892a7a38e5f8ad1a3e24a6a9cfdf11db668c7bb493bb41b3f16eee2e86fd5817e9750fc3639919073725be94d800ded7ccc0c589465f69a2455ed76953472b7ffc094c2c4ab562372f2bf00b407c7997259321b678889ff14717376709e03344468c5eadb7de94e1531d12ba63f4ad2e0b8d93c01b22c937200aae7dd127aa712c531774b766c08d1c88380436e8d6c6b220d8f5eb1eb203e63750a2cdb483a746fe49e1711b29de2c626d50fdec7800a5d64d4653e02fb1da7dae059f83b8dd3c375e71383704d8017e063d6d24c2d3f5e9520fbe1f23026db6fe5bbf222e46d760a6fd24a0b8176b151c697c379121a5c1bbbd7df9693adbfb3d0655aa5789a57f476002440e4aeb1d6fd13625f6e5794d822af610f99742f05f4efed9a861f965d04b813ce455668f3cea419fb8568d31cd52a7c3221c2b7b3d910926146e9a4265aab376150c7bd39b7848848ba6b98af9576c63c490ad15ce4f62bb5429999d4a7e96091c35b9a07374aacf4327cea91cd0f3a7c69f08e139e60a2049b0dd3d8640e636f2b659e6664a546e22c2bb99ad1e69582daa3fa6647eb23ff3694b7d41ad6378ed32f012e396164cc0ca866b5d860f6ddd4e581f826ee05cc038b771479dd412e3041db74968abc83404bffefa9b7fa1a52fd5f179b4e6b169250f5ff4764cedaa451ccf31aae84e7724df40b1253e0fad2e7b29689e635b6396a9498935fc3f4200c15a9c1a8b5bd0ba31d60ddce954e49606a083068807ba3ef6938a4d3218571ff72b4e922307e018438151851f096827985d9415c6cf5865bd5815e042326b97dce6cb6d31543157ac36393ca34095c77310f4ba13bdd915d034c2de50197e03b553bf9e2e7496bab51552de39d7bc0da4a7cffa7103e72c9cde6d80690daffdc5c67512e6e9f81671a3c7cc9f50d93714304fba9180ed1fcc07c5f8d4cb905cd62fb2a5fa2bd718fd6c33b936026934492779ec774a910657e4181564a34f306b6bd9e5638d8bcbc64a3163bf9d49030fcb341b90553a6058d772b2013f2fc1b80ef5b09cbc771c45e755e095fff1907d6d71ff5f6bf6be232821234067edd990e879668bdc5b086df790dd152cf11c7d705f3c9e44380cf18f484513ee2de5140dddf12a4adab02748a3496c551bc5d5f6860eb5524eb878ea7f7526d720d43cb5c7104c57f0fd26781693daab6d479319ed211789ddd7d7f3963b81b28a80e4e3e22adf0aa35263535fb9ef49b0c0f314a2bd78d7d690208661d41a1d2d239de09210992959745e6a3014448b2ada7903587f38fa579359d74d7a43b55d540bb0a9973e1d26a7a9c65f315b995c3d71a57f15604e5571b648eacac3533822d4bc9c24bbba7160b074b40cbd2a435711a552e406ac3e69094c8b189ab153a3e976158989b218f5fa05f6db0a2eea6f681d8ca8ef9025c3998695b9588231e1a36003874c20367c2980af31901db646f912575ac24b14137ab49564f0f8310fd4c7d80b05d249f80aec2ac7e7b81e02"}]}, @NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "ef36179a389407a16f5d2c762df82a0fbd85d3059bfda5532a6cafee9a47b0ad12d21dac2ea12f34797ce8430eaee4cf80906548912068e96a329a4899e6eda091d24668a8ec42a6c5c559ef1a11710b80dd8344c68031f658dff18e17cc744b7247b02306c1447089d46a5203c99213f1bbd87cd165ff6abc551832f6db6ca5af4bd99c11913044ad89f7090b87092624a28061ddcaa4b60d27a2e70e3e1df41d1a6c28091d87b738cdfec2af0cd0192b6873e968d33831a70977d1e5fdbf"}, @NFTA_DATA_VALUE={0xc4, 0x1, "9f1ac287d4c7a9222fcd40cbbcc1b77a091d4d7ad1dd268d61429614d4e04e22b1d3f8bae84d17db5dab18540239fc41da08e269604033a1d07d9f2c07177ad611cc3e5e801ab1b6d166fc54ef28a818a5050701db53ea99561a4d502572ad9584770bde06c8b85b92d78dc33fc4392a9f006cd2bdb5f5359ef629e26ebd4b5d9ffe5914b50d4a6fe289360de6ed0c3e9f73505b181311680490e73257fd57817b474243b0d0efb48fe207251eb4f7b620ae658813b14129f65fcd95a3465861"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x137c}, 0x1, 0x0, 0x0, 0x20008811}, 0x8004) 17:02:49 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x2, 0x5, 0x3, 0x1, 0x1, 0x9, 0xffff, 0x0, 0x5}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) [ 424.670863] bond185: Enslaving bridge135 as a backup interface with an up link [ 424.697293] device bond185 entered promiscuous mode [ 424.702465] device bridge135 entered promiscuous mode [ 424.707972] bond185: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:49 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) [ 424.743174] IPv6: ADDRCONF(NETDEV_UP): bond185: link is not ready [ 424.760564] 8021q: adding VLAN 0 to HW filter on device bond185 17:02:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r4, r3) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x300, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000014c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x60000880) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) dup2(r2, r1) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r7) 17:02:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) syncfs(r1) r2 = socket$packet(0x11, 0x2, 0x300) migrate_pages(0x0, 0x6, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x17a4a6e800000000) dup2(r2, r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40001, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0xfc, 0x7, "1c9d5a42"}, 0x0, 0x2, @fd=r3, 0x0, 0x0, r5}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x80000, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000240)) [ 424.783694] IPv6: ADDRCONF(NETDEV_CHANGE): bond185: link becomes ready 17:02:49 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x16, 0x6, 0x1, 0x3f, 0x48, 0x8, 0x6, 0x3, 0xd8, 0x7, 0x7, 0x81, 0x7}, {0x2, 0x9, 0x7, 0x8, 0x3, 0xfb, 0x7f, 0xe, 0x20, 0x3, 0x8, 0xf0, 0x3f}, {0x8001, 0x40, 0x9, 0x8, 0x1, 0x3f, 0xec, 0x92, 0x5, 0x1, 0x81, 0x4, 0x6}], 0x7}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:49 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x40400) connect$caif(r0, &(0x7f00000000c0)=@rfm={0x25, 0x7, "03bf399c7a01730d4b0fa478d9edf00c"}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x228280, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) [ 424.842997] bond185: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYRESHEX=r0], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:49 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9e0000, 0x3f00000, 0x9, r0, 0x0, &(0x7f0000000080)={0x9909e2, 0x2, [], @string=&(0x7f0000000000)=0x1f}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:50 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a0}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xadc1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4044}, 0x20008810) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) 17:02:50 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000080)=0x18) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e23, 0x6, @private1, 0x8}}, 0x7, 0x81, 0x1, 0x7, 0xfff}, &(0x7f0000000100)=0x98) 17:02:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9fd900958c0b6f403c00001010000d079019111f8c909b", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00'], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x7fffffff, 0x50313459, 0x3, @discrete={0x7ff, 0x7}}) creat(&(0x7f0000000140)='./file0\x00', 0x55) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x8001) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000100)=0x20) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f0000000280)) dup2(r4, r3) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1ffc, 'dh\x00', 0xb, 0x0, 0xb}, 0x2c) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0x1000, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr=0x6}) 17:02:50 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x80}], 0x1, &(0x7f0000000040)={r1, r2+10000000}, &(0x7f0000000080)={[0xdbb]}, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x4, 0x4, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)) 17:02:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x80000001, 0x81, 0x7f, 0x2, 0x1f, 0xd2, 0x90, 0x1, 0x6a, 0x0, 0x13, 0x7, 0x15f}, {0x0, 0x4, 0x80, 0x76, 0x4, 0x0, 0x2, 0x9, 0x0, 0x81, 0xee, 0x7f, 0x400}, {0x682e, 0xfff7, 0x4, 0xaa, 0x0, 0xf1, 0x7, 0x7, 0x72, 0x1, 0x57, 0x1, 0x7}], 0x7}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x8, 0x5, [], &(0x7f0000000080)=0x9}) 17:02:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000c20313ce0dff00000200f6ff0c02400000", @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="037100009b7d4b76a9360d45f81d3299c076699eb834205592a3e8df6f84855bebb4453493bb9934fb860e3ce489d185924b356bb22fa2ddbb94ff708c791f69b9040fb0d7c1c46bedf3ff0e59c734a130efd07c1643fa38e2dd3349e2a781a558a10c2b63675f92f218fb39d49f14b7559dd397c918"], 0x3c}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x8}, 0x8) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 425.527442] device bond187 entered promiscuous mode [ 425.539892] IPv6: ADDRCONF(NETDEV_UP): bond187: link is not ready [ 425.548459] 8021q: adding VLAN 0 to HW filter on device bond187 17:02:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000100)) dup2(r2, r1) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x7f) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200) bind$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast2}, 0x8}}, 0x24) socket$rds(0x15, 0x5, 0x0) 17:02:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x1}}, 0x18) dup2(r2, r1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000000)=0x78) 17:02:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) fcntl$setsig(r1, 0xa, 0x23) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000240)) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x4, 0x5, 0x0, &(0x7f00000001c0)}) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044890}, 0x200400c0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) recvfrom$rose(r6, &(0x7f0000000440)=""/4096, 0x1000, 0x10000, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 17:02:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000250800"/20, @ANYRES32=r5, @ANYBLOB="4be702de000000000895b90001000000480018801400018008000100000000fc080001008000000030000180060002005d000000fc00050001136891d7d3c3aa01c8f47d276a1092070002002b26000008000100ff010000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f00000007c0)=""/194, 0xc2}], 0x4, &(0x7f00000009c0)=""/248, 0xf8}, 0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r6, 0x2f, 0x83, 0x8, 0x1, 0x20, @local, @private1={0xfc, 0x1, [], 0x1}, 0x40, 0x20, 0x4, 0x400000}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17:02:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:50 executing program 5: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) 17:02:50 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x65, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 425.939429] bond188: Enslaving bridge137 as a backup interface with an up link [ 426.008635] bond188: Enslaving bridge138 as a backup interface with a down link 17:02:51 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x101100) 17:02:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:02:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r9, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001080)={0x208, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000848) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$VT_RELDISP(r2, 0x5605) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x81, 0xb, 0x2}) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f00000000c0)={0x2, 0x1, @stop_pts=0x51}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:51 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000080)={0xaf6f, 0x1, 0x4, 0x100, 0x1000000, {}, {0x1, 0x8, 0x4, 0xfb, 0x3f, 0x4, "60c31688"}, 0x5, 0x1, @fd, 0x0, 0x0, r6}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x7, 0x7, 0x4, 0x2, 0x9, {0x0, 0x2710}, {0x4, 0x1, 0x1, 0xff, 0x9, 0x1f, "a0786051"}, 0x9, 0x2, @planes=&(0x7f0000000000)={0x6, 0x5, @fd=r2, 0x5}, 0x4, 0x0, r8}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000000)) 17:02:51 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup2(r2, r1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x3) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) setsockopt$inet_dccp_buf(r4, 0x21, 0x19294f1c25f228a6, &(0x7f0000000340)="be580e61911652b665be64cbbd79946a0a46e1ec6c5cf0a57ddc0409b141a3fc274b1f4db3890e76255d93dae1059c057e029fe944e1d05564cc61c9ccd66b871bff954bfd50cdfc64626afacbeadedeb40002dc5d0a58741f43f3f722a33b175cfe07ae6f59afb7c9cd566bfbaa0f84605a1675f6027ee95477ccd43149b11ec1ff8515e9611a20e0afebb8053e10e4abe48180fdf409bb1377ab75536d02ee25", 0xa1) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000240)) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0xa1, &(0x7f0000000100)="5f6d07a7ef502a5d5f6facc0a98c4911b93750996dd9fed1eeddc654a02dd19dd32979db7eb417b6e4561e76fa6cdd80e7eeac1edf80a94cc864b711883a926142d29e8bc1b9606295a8c07b9bdb0663b028714df39095478034b251f486438c5b1dbb4b7b47ed7ea41b7be8c28cc9436c6480ac9ecb43f0027761de21ee0e019a1fbe9e132196ad5323bf3d21a5efdcf5a43898f1be2fc8ea7617e98cd86e79b5", 0x54, 0x0, &(0x7f00000001c0)="baee67ef05596ffca3ab4fb6243d3f1d7f2fa0313b0e384ddd671d9a460c9869ab19d60fcdba719df5a55670074b6b1ff0e3574acb8d21b2b985e71da19400"/84}) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f0000000000)=0xffffffff) [ 426.391126] bond189: Enslaving bridge139 as a backup interface with an up link 17:02:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8a, 0x12041) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140d, 0x440, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x440c0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "aca4fb3ca09a3ac5be68359db862b72349257e237ca2838967f15361"}, 0x20) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000000c0)={0xc7b, 0x100000, "1c3f3cc43548f3f34be677d84868f4cbb085d42dc3f38af6", {0xe7, 0xf48}, 0x7}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) sendmmsg$alg(r3, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="6dd4366793708d308fac08df81667de55f54bff24a2ca34fb7395f43fcb1d94a22015ac119bf6ccdeed36b938fb08364616b77b1f7f3bdbd48e21151118f1217202535f6170323f9a31f497c181f42f60f0770e7280026c537a363433947403733854b0047027a037efb3a89013395ca9ba470a5b9ed5f8d1bfbbb3b548da0e69cbc8a2e9be7ed", 0x87}, {&(0x7f0000000100)="4407f1b51979556079452bd84df1da7fecdfb9e843ba4720437017d8bd", 0x1d}, {&(0x7f0000000280)="84ef3e4ebd139c2714143e43bb305a45fcb745da85a987bcb8ac04db9a3b00ba7327707412256474e30aeddafd07a2e8de2cebf5396c30cb4f2f24f90349d69d205966e3a815d1330896df95ed7132859eebe3daac7a0317845c0fc0318e9d23f2923cd9b1a1155f58144d39119e8c6e09977d4bf338cbb2fb6c28aef01ea626789526580a94a6803b3d663624cc1542d53a218d8c62e206cce71b3eeee0f44c2b829c63d865598ee4fa03ae9f9763761b774a66dd2f90ee0b015f564061ffe5e380aa70cdf9715b07b525218f919e2929641b296c3a74ad17c8cfef5a9acd519d6c", 0xe2}, {&(0x7f0000000440)="0efca49e068f34f9a367f44b8f1618b0f11d3ce8b502626a2dff2cb971b1ca10f4d703a5a9a90eb8f6ad66c30efe040ea0b3838478a2d06db816aaa899770dffe3b38504ed64df37f482cf07552a0c2d107929f7a7d7bb882aae65ed87288aa673fe35b8265ad4e99c1b0e98eb2c8e3fc73460ea500bda75f5f3550f8124655ddb483563062d3822bc35d3d9cc2de72f27f4cf24ce9ba76f24518f6fa52d9e2a8ba3adb0cedecb5a11aea06d67f9b23ed9ff21cbf8bb93603ca5806c8519c7de63fd405989182d77e7c946e3dfc102ea453a8ff5786b90de2e436c569ddec84c3d844fe1552d02", 0xe7}, {&(0x7f00000009c0)="5f28e03284bbf0facc1d217492ef7d6531ba50dd7b51c10a0000159f8dcda5ec5e0fbb8caca27cdfa3aefcec5b0734319bb50ab22e9cc2b07163af580ebff88d2311b62828a2d06370f2b9f10144792203edac231237f1e7efc54294cfaa44b123283d65025e88b3d1e5fc2718f49ba03eb4a0d5523a9711c7d6f90b44858371f36e237f25ad63aa9b45a7706c45ed9342a5d0ff174e8f7fa0fdd739e9a1dcee487493cebf2931c067d25524d614d7f51ab94dd3e6645a171d34d528a2501930f1f6a05fee4b2b6580dce7b5836482301e20c0c548376c466212928f233d2b15b6", 0xe1}, {&(0x7f0000000600)="0ad03af00d545ca90ee59701e167e2c8742377a8fb4a41400c939cd8d912a999ae120c2fbc5b9b660b5a56f3dcd5c8e21530aecefad44aa2c7100d08b7aa8ea80492c1436c4f60c542e27b829c68494abc150abcd920b873a400a593a443b27d2f6a9d4d04d3e8d10018f080bc0a041e214b1f12f54f393c18617136098357985e04c03a45df47a20270d471d37a4da96da1eea8613f11d452b595192c9e63aa4a9213de28bcc98d889eae038f8367f6892887b4e41a6386eb729f81d7280e3cb5b1611a4c0b", 0xc6}, {&(0x7f0000000700)="43585cecf72cc09c2bda503ebe410e27f1403e4543d5cef5a18c5c57ed11bb35a2bf59a87185ea52ad90630df67180601cf138ec4fdeb80dfbf642affcdb4889545f72c116f9017e207ae28a85625b8dc26a9cee46471abcf6f27efe26566f5086bd9380b1ce31c45d77fab7e4e541da098f0f1937aab17f313e47ba26628969fb70f858c385039df7e8d0c591b4bda08a17de89caa06c07f1e9e4890707e79b98cfca6140eb21a280fa0cf33272125da4c5a04f9bd55e2fd0ec8c79ef01781617823c2fc516b8d503842cbf5ea7", 0xce}, {&(0x7f0000000800)="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", 0xff}, {&(0x7f0000000380)="e7bd6d1b4b9646f17b1f23e90881824d95443665db9cf3c2f23f96e5fdc021eacf44155ead76db043c64d8842ebb8dab9a5ddba7590e377dffcf", 0x3a}], 0x9, 0x0, 0x0, 0x40080}], 0x1, 0x0) dup2(r2, r1) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 426.621039] device bond189 entered promiscuous mode [ 426.621047] device bridge139 entered promiscuous mode [ 426.621460] IPv6: ADDRCONF(NETDEV_UP): bond189: link is not ready [ 426.621469] 8021q: adding VLAN 0 to HW filter on device bond189 [ 426.629373] bond189: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 426.629431] IPv6: ADDRCONF(NETDEV_CHANGE): bond189: link becomes ready [ 426.631127] nla_parse: 17 callbacks suppressed [ 426.631132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.652586] device bridge140 entered promiscuous mode [ 426.657874] bond189: Enslaving bridge140 as a backup interface with a down link [ 426.733093] bond189: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 426.742074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:51 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x2) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x3ff) 17:02:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "69bf5a42"}, 0x0, 0x0, @fd=r1}) 17:02:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x80000000, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @fd=r1, 0x80000000}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'wg0\x00', {0xb8}, 0x4}) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x1, 0x4) 17:02:51 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) accept4$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x40000) [ 427.084367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.090525] bond191: Enslaving bridge141 as a backup interface with an up link [ 427.091001] device bond191 entered promiscuous mode [ 427.091007] device bridge141 entered promiscuous mode [ 427.091384] IPv6: ADDRCONF(NETDEV_UP): bond191: link is not ready [ 427.091421] 8021q: adding VLAN 0 to HW filter on device bond191 [ 427.098515] bond191: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:52 executing program 0: creat(0x0, 0x100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x11210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2], 0x0, 0x5231}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, 0x8) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x8) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x800) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, 0x0, 0xfffffffffffffe1d) 17:02:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x2f8, 0x0, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @private=0xa010102, @empty, 0x8, 0xffffffff}}}, {{@arp={@local, @remote, 0x0, 0xffffff00, 0xe, 0x2, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x101, 0xf6c, 0xff, 0xfe00, 0xfb28, 0x5, 'veth1_to_hsr\x00', 'team_slave_0\x00', {0xff}, {0xff}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x80ffffff, 0xff, 0xa, 0x7, {@mac=@random="f913241ba1c1", {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0xb5c, 0x100, 0x6, 0x1, 0x7, 'bond_slave_1\x00', 'wg2\x00', {0xff}, {}, 0x0, 0x94}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @broadcast, 0x6}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x540) 17:02:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r7, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x5, 0x8104, 0x2, 0xffffffff, 0x0, 0x9, 0x7, r7}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x6}, &(0x7f0000000100)=0x8) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0xc, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 427.102468] IPv6: ADDRCONF(NETDEV_CHANGE): bond191: link becomes ready [ 427.204125] bond191: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x6, 0x5, 0x3, "9e930fae240faadb0618e4c279d5d0997b4a1e02f7ff26efd073ff50706800de", 0x1009610f}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0xc}, 0x0, 0x0, @fd}) 17:02:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r6) r7 = getegid() r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r9, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1, r6}], {}, [{0x8, 0x0, r7}, {0x8, 0x4}, {0x8, 0x1, r9}], {}, {0x20, 0x2}}, 0x4c, 0x1) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x6f, 0x2, &(0x7f0000000300)=[{&(0x7f0000000380)="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", 0xfa, 0x200}, {&(0x7f0000000480)="18c4d6165e5d1d6f14246634967e6914f8bb0f194411fea2bca9d0d82fa838dfa7440a646aa2752a256d571f6499f16ce28626bf14e9ed936d8a7c9a9cbec1ca2b1b25ecacb4ea67eb03cfa92c2b6c15c6411d1fcaf625ed243d0e53531fb1aeab8c8c6dd815ad84dcc7a879e3c047b61687756640f69d96d04e001a66845bf5765ff6a32fb08ccbb9288ffa073db0be6784afa91f7275c105072ef075ad9baeb520018ace0294171cad46da1b139fc80c4b88e15ec8450a461198c1907a1040f70d04c9cce9f419e8346c61630d208c08f2", 0xd2, 0x5}], 0x1004000, &(0x7f0000000600)={[{@creator={'creator', 0x3d, "84e333ca"}}, {@codepage={'codepage', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@umask={'umask', 0x3d, 0x7ff}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}], [{@smackfshat={'smackfshat', 0x3d, ',:'}}, {@fsname={'fsname', 0x3d, '!:]--'}}, {@euid_gt={'euid>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 427.288905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xedabe183de02e74b}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x29, 0xff, 0x15, 0x81, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x700, 0x8720, 0x6, 0xffffffff}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r10, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r10, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x260, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xa00}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x20004009}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 427.599878] hfs: unable to change iocharset [ 427.599917] hfs: unable to parse mount options [ 427.640926] print_req_error: I/O error, dev loop2, sector 0 [ 427.643802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.680931] bond193: Enslaving bridge143 as a backup interface with an up link [ 427.682177] bond193: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 427.682516] device bond193 entered promiscuous mode [ 427.682523] device bridge143 entered promiscuous mode [ 427.683137] IPv6: ADDRCONF(NETDEV_UP): bond193: link is not ready [ 427.683146] 8021q: adding VLAN 0 to HW filter on device bond193 [ 427.782923] bond193: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 427.826852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.836910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.855110] bond9: Enslaving bridge12 as a backup interface with an up link 17:02:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x400, 0x5, 0x4, 0x0, 0x8000, {0x77359400}, {0x1, 0x0, 0x0, 0xfd, 0x2, 0x0, "06000001"}, 0x0, 0x0, @planes=&(0x7f0000000000)={0x5, 0x4, @userptr, 0x48}}) 17:02:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000000c0)=0x5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48050) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 427.959687] bond10 (uninitialized): Released all slaves 17:02:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x6, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x8, 0x0, 0x2, 0x0, 0x80, "bc4c7455"}, 0x0, 0x2, @userptr=0x7fff, 0x80000000}) 17:02:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x8, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/8}, &(0x7f0000000240)=0x78) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x4000, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd, 0x80010}) [ 428.205898] *** Guest State *** [ 428.205949] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 428.205958] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 428.205963] CR3 = 0x00000000fffbc000 [ 428.205969] RSP = 0x0000000000000800 RIP = 0x0000000000000000 [ 428.205976] RFLAGS=0x00005233 DR7 = 0x0000000000000400 [ 428.205988] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 428.205997] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 428.206011] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 428.206030] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 428.206043] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 428.206056] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 428.206069] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 428.206079] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 428.206092] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 428.206102] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 428.206115] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 428.206123] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 428.206131] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 428.206138] Interruptibility = 00000000 ActivityState = 00000000 [ 428.206142] *** Host State *** [ 428.206150] RIP = 0xffffffff8116426f RSP = 0xffff88804319f9d0 [ 428.206166] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 428.206175] FSBase=00007f7fe8aba700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 428.206183] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 428.206194] CR0=0000000080050033 CR3=0000000042c9c000 CR4=00000000001426f0 [ 428.206205] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 428.206214] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 428.206217] *** Control State *** [ 428.206223] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 428.206228] EntryControls=0000d1ff ExitControls=002fefff [ 428.206237] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 428.206243] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 428.206248] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 428.206254] reason=80000021 qualification=0000000000000000 [ 428.206259] IDTVectoring: info=00000000 errcode=00000000 [ 428.206263] TSC Offset = 0xffffff17d70f40a8 [ 428.206267] TPR Threshold = 0x00 [ 428.206273] EPT pointer = 0x000000004a9dc01e [ 428.206281] Virtual processor ID = 0x0001 [ 428.255217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.262608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8530 comm=syz-executor.2 [ 428.276523] bond194: Enslaving bridge145 as a backup interface with an up link [ 428.277275] device bond194 entered promiscuous mode 17:02:53 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x0, @sdr={0x3234564e, 0x1}}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 17:02:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 17:02:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 428.277281] device bridge145 entered promiscuous mode [ 428.277686] IPv6: ADDRCONF(NETDEV_UP): bond194: link is not ready [ 428.277694] 8021q: adding VLAN 0 to HW filter on device bond194 [ 428.278187] bond194: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 428.281727] IPv6: ADDRCONF(NETDEV_CHANGE): bond194: link becomes ready [ 428.392926] bond194: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:53 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) [ 428.686683] IPv6: ADDRCONF(NETDEV_CHANGE): bond193: link becomes ready 17:02:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x22b, 0x10000}], 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'rose0\x00', 0x81}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0xa, 0x0, 0x0, 0x0, 0x8, 0x1, "1c9d5a42"}, 0x0, 0x1, @userptr=0x3}) [ 428.759727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8552 comm=syz-executor.2 17:02:53 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 428.823016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.876434] BTRFS: device label [O=h©\w„Ø )Mš%Ê0êl[A‡7àF¡ñeFËsQó ûi¸Ì€ïrV= [ 428.876434] õWfÏ›J8ëW^xNŽ¢²u0É›ìzCD©%\ç=2i0=Û+Tܲï¸ÓVÂé¸ [ 428.876434] yŸèøkOh°Àâ¦P ÐœP–«Ôzͪ6k¦§Ôqæ‹O÷§$¼XIa܈ˆ devid 11563128583445808778 transid 12328016389919772676 /dev/loop5 [ 428.930708] BTRFS error (device loop5): unsupported checksum algorithm 25548 [ 428.930725] BTRFS error (device loop5): superblock checksum mismatch 17:02:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:02:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c001200d235656e2a48f514000000000cfc0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000080)="b84a49ba44c4ab824f96ab779564eecd15ac0908e80364d5f1b9f4a3a21873eb659f88920a80ffb7c6cacdfd32c99324ed2ec2d7e48397dbe74c34dd2fc5d82976793c87599b062268c7d65bd1a6205e16f2f71f245a077c73a9fc6caf718d4102f5920a57dd05bf8b74ee226e1fceb499b1b76c79cd0b6a033d3d30f2865067afc7", 0x82}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4008800) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) fsetxattr$trusted_overlay_origin(r6, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r5) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x20, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0x4}, 0x0, 0x2, @planes=0x0, 0x80000000, 0x0, r5}) 17:02:53 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 428.991173] BTRFS error (device loop5): open_ctree failed 17:02:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) [ 429.041620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:53 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a0}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 17:02:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x141000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x3f5, 0x201, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x55}, 0x4004004) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000002c0)=0x3) r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r4, 0x200, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001e00bd7000fedbdf251f00000005009200d900000008009a00020000000700210061610000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8010) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3dc453ad47d3e236dff3eef358"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "a635bab257aa41e1b0cc28a343cbe3c1"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ecba7dfe3758c1419c6249f21c"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x40040) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000500)="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") ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xc, 0x4, 0x40, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "949d5a42"}, 0x0, 0x0, @fd}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x2282, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0x5, 0x6781, 0x75b, 0x5, 0x5, "6813d9b9394dee6b90dc839fd5afe135aad435", 0x8, 0x30c}) 17:02:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f00000001c0)) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x710028b7, 0x8, 0xe615797d2a3fdf3e, 0x9, 0x5, 0x0, 0x2, 0x5}}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xaf51, 0x4) 17:02:54 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x82641, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r4, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x8, 0x8000, 0x6, 0x6e4, 0x0, 0x7ff, 0x77, r4}, &(0x7f0000000080)=0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @fd}) 17:02:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16=r5, @ANYBLOB="14b1a9661b8027cea07269656765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c001) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x59600}}, 0x20}}, 0x0) 17:02:54 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xa, 0x88000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f0000000100)={{0x3f, 0x1}, 'port1\x00', 0x99, 0x0, 0x4, 0x80, 0x8, 0x86, 0x8001, 0x0, 0x2, 0x20}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x0, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x1}, {0x4}}], 0x10) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 429.427063] audit: type=1400 audit(1594659774.289:33): avc: denied { write } for pid=8697 comm="syz-executor.0" name="net" dev="proc" ino=109120 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 429.427732] audit: type=1400 audit(1594659774.289:34): avc: denied { add_name } for pid=8697 comm="syz-executor.0" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 429.440407] audit: type=1400 audit(1594659774.299:35): avc: denied { create } for pid=8697 comm="syz-executor.0" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 17:02:54 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) sendto$l2tp6(r1, &(0x7f0000000100)="16c85bd6ae724d5fa23b54732c8481e4556ac7acc8fb7a5723b1268a53e85d233d56b061ed49169adb34eea5545af8a7b06f159479050a18f1a490840816bf26c86acfc844de296e683805443ca8ff02a43a1bb2ec80231d0e246fb90c496b313ed37434854bb775f950251ff509a5a950d4335c212701920ee0", 0x7a, 0x10, &(0x7f0000000000)={0xa, 0x0, 0x400, @remote, 0x3}, 0x20) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r3, r4) bind$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) write$P9_RCLUNK(r5, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) 17:02:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x1, 0x5, 0x4, 0x0, 0x0, {r1, r2/1000+10000}, {0x2}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000240)={{r4}, 0x9, 0x800, 0x7608}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:02:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x9, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @planes=&(0x7f0000000080)={0x3f, 0x2, @fd=r2, 0x6}}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x800, 0x6, 0x8, 0x4, 0x800, 0x3}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x1ff) dup2(r7, r6) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)={0x81, 0xb, 0x4, 0x22, 0x200, {r4, r5/1000+10000}, {0x4, 0x8, 0x2, 0x1, 0x7, 0x7f, "3365a6c7"}, 0xe30, 0x3, @planes=&(0x7f0000000280)={0x10000, 0x1ff, @userptr=0x1f4, 0x80000000}, 0x1, 0x0, r6}) 17:02:54 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xf2, "c9484f21dd5244e98a7c35c69939697bb3022b79463e6bbd3009d3fdfb5f09d63ef1fc73e90a12ccdc23d924337dbf5acef8da4872accf0122dd632d79527ef25768afc5dd5bd4aa8ee1d3f98e856df47396b390c6871ec3998ce1bbaa7466df85665e9458e5ef5f8dd3f486ff2f41478cde08a281f79c619fa267daafdc2eff3fe05a7c2df637b6e8eeb622060190f8ea65c6ed4da398ab19e4d61d271ef528fe11abaad6ebc564d0b0d87b231151973f2cdd036a6727d1cc54e056ebebc7a52d10d411748b8994c1fbb33b9cbf74af365ec659d78c2704cba40d2e7e52afc39b32aa3f3a73a7a51fcb36ac68340918deba"}, &(0x7f0000000080)=0xfa) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x1, @loopback}}}, 0x84) 17:02:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 429.869875] bond197: Enslaving bridge147 as a backup interface with an up link [ 429.870351] device bond197 entered promiscuous mode [ 429.870358] device bridge147 entered promiscuous mode [ 429.870724] IPv6: ADDRCONF(NETDEV_UP): bond197: link is not ready [ 429.870738] 8021q: adding VLAN 0 to HW filter on device bond197 17:02:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:02:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES16=r0, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b05fff30000000000000000000022aada13fe7329979dd3d8ef5c91ce570ed8e75b789fb09c46190dcbea13cdef227c3179d249becdbc0e73c328b3b04b10b2a7e0d9286c55655bfc43c03fb36a275af065400e9afe9ea4d52c547705cb8fc35d550cea9c9aab9508f3868f7957387aad6a4035471a49ad21", @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @bpq0='bpq0\x00', 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) connect$ax25(r7, &(0x7f0000000400)={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001000250800"/20, @ANYRES32=r9, @ANYBLOB="4be702de000000008408c787fe7002766dcb56b390fee698b653c7908be14f732d623858629a303cd117092d9eb5680c4954ae0ba4aa20264c5c1bab637af15ffc54f4f19935a404dc635b7dad85005aa340cf475fe72921bda77c96e6cf0b47bde8c1dba1f1d27be0e09d0a70721c4951823aeb7f2e6bb4a227f028846d3e000c54667b910b484b8484ee54e0b2111be26713e47cea4d9fc61f"], 0x20}}, 0x0) 17:02:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000000)={@fixed={[], 0x12}, 0x7f, 0x3, 0x589a}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1}, 0x3, 0x0, @offset=0x5}) munlockall() [ 429.871231] bond197: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 429.875643] IPv6: ADDRCONF(NETDEV_CHANGE): bond197: link becomes ready [ 429.915308] device bridge148 entered promiscuous mode [ 429.965685] bond197: Enslaving bridge148 as a backup interface with a down link [ 429.990195] bond197: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:55 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x59c2398b, 0x4}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket$packet(0x11, 0x2, 0x300) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) dup2(r0, r3) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000000)) 17:02:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0x3f, "4840ae9c91eab5aef4fe812e4965f3cf968e89628fa6b5458e94f021c05d3a1f", 0x10, 0x5c0a, 0x2, 0x2, 0x5}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x0, [0x3, 0x1f, 0x7, 0x4, 0xfffb, 0x800, 0x3, 0x9, 0xfff8, 0x7, 0x4, 0x7, 0x65, 0x7, 0x4, 0x400, 0x59, 0x1, 0x2, 0x5, 0xffff, 0x8, 0x3, 0x3, 0x20, 0xfc00, 0x8000, 0x1000, 0x0, 0xa2, 0x3, 0x200, 0x6, 0x8, 0x0, 0x5, 0x7f, 0xb21, 0x0, 0x2, 0x28, 0x1, 0x9, 0x81, 0x6, 0x7, 0xfffa, 0x7fff], 0x4}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x3, 0x2a}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r8, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@private2, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000, 0xffff, 0x7, 0x100, 0x401, 0x21, r8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x1}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0xfc}, 0x6f86, 0x0, @fd, 0x40000004}) 17:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004e30bd42ea830e4a506425db75c7e70b0a64f9a54137ad278a425d6935f526a1f18b6c617b3e5717fd483f92b69eaf7c4121b19d5e5a449875a5a4caa03f8a7908c6b4b76cacacbe0d9adf2ab0d42ced6da1967d86a0a62cceb69e00173212c53697b85173b17cbe4165ebf57fdefdc938f39d5c1b9aa5789db7b446fde1adef680e07e47bd17101504dd3b4242f937f910500e1e1a58c6d3b6b23ebf4064ce5601cb50982e92534eb84af2c3f316b3b3702ac39897eb1aa8e9a6978ad59f103b0951bc7ee4111273d5ae4bb643941d27cefe0165e2cf43c81785d9e3f938b7779ad312910081e99b6e62cf29532802567af694361a4905a9ed4d341154c20ce25b01226dc1b3d2e55b8c301aab9c4f4c0842cc52556fdcc1f2f3d81b42597615284d002ba81daf169c5ecd06ad010ab5d36c58cc235027ac4b56a7fcad772610c259f357a7b335378b71c226e67743539f71a86137c0700fbd6cb4ce65df7a71693aa5b3f173b250a4a6d4e29361cbe56a0615e6b0b734800c50a19a48624cee61b92f9c19e1000feafb"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:55 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:55 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:02:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000040)={0x4, 0x2}) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r0) inotify_rm_watch(r0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) 17:02:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5bf9b903}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6239a9f7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5746}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x880}, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setsig(0x4203, r4, 0x800000000002, &(0x7f0000000000)={0x2, 0x10001, 0x8001}) [ 430.448795] bond198 (uninitialized): Released all slaves [ 430.465062] bond6: Enslaving bridge5 as a backup interface with an up link [ 430.478396] bond29: Enslaving bridge149 as a backup interface with a down link [ 430.500867] bond198 (uninitialized): Released all slaves [ 430.532285] bond29: Enslaving bridge150 as a backup interface with a down link [ 430.539918] bond6: Enslaving bridge6 as a backup interface with a down link 17:02:55 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r8, 0x200, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'', 0x3a, 'team_slave_0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x44006}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r9 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r10 = socket$packet(0x11, 0x2, 0x300) dup2(r10, r9) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f0000000100)) dup2(r2, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0x1ff}}, 0x0, 0x0, 0x44, 0x0, "6f89033d8d170231f663a620f42296b8cbbb032958a2181ec065cc5d4bc2bb455a287cae851edce41eca3d5a0c1d70863093a603d8cad90fe33dd32202835d6560bc6e731df65707e0665c0cd3318993"}, 0xd8) 17:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xedabe183de02e74b}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {0xe, 0x5}, {0x0, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x9c, 0x7}}, @TCA_RATE={0x6, 0x5, {0x80, 0xf9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_blackhole={0xe, 0x1, 'blackhole\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000680)={0x401, 0x4, 0x3b, "4dd91ad27c7739cbefe5858aa0f98cd57f3399cc132e52d852fccc897f04ccd07f0acbfe4892ecaa898dbeac3c4739f534b0d6dd60a34e6f0c0532b5", 0x28, "04a954d2dac61915d82fb19a8962b0213f40c3d4fae8c813d4c3217151d6f3d701a007853ced2248e8797857579a82a50acff8bc929ab1d47aca468c", 0x20}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', r3, 0x4, 0x3f, 0x4, 0x401, 0x1e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x8060, 0x40, 0x2, 0x5}}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1060200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xfff3}, {0xb, 0x1}, {0xfff3, 0xc}}, ["", ""]}, 0x24}}, 0x41ce47d4c8d62492) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:02:55 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r1, 0x5, 0x3d17f50c, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r0) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="85f6aa5286956c32d7209491d8052c7dd5e5c13e615d932e5cd3343c5cee2b0b6edf6d12b6e6268607fe974339c639e41c6f80a17ba1f9047f6c0c2c9f22cb6bc6ef640bf218f85afcc7a05e7edd279f872c742158aa4de3cc76723a096fd7b5c4598d1f1095cc13b4742706b57b0a2be057b7ff0736fdcd22b06c5d33487517915adde3fdf0d0eef41ec2e67cfd8340ebe2981ae00b8159a4d77996724f37ce2d93bf1628d5affceafd9f82c3938797b6d116b492f939bffef7591e6147f715fd8aef6fd8952bf0"}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:55 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x22000, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:55 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:55 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@netrom, @rose, @remote, @netrom, @netrom]}, &(0x7f0000000040)=0x40, 0x80000) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\'%@$'}, {0x20, '^'}], 0xa, "71885e15a9232b19793c7373d5a49f97afbf3e4a4bde8ec9a0fee92c20b30e0eacfefd1a386e5b3aac30f8a3e203d81d1d2bc8d1cfb34531e9b016e3c812253a430ee47c26d3687ad21ceec08403a0656147731f603270cb2148ca4e2e3ad0f989935d584ffb1fa4b49e5777ff826b16b20e18232093c1962dafe04cb5d58b3430aa79b144afe05b4fecb247d6197cf4393617995f7ee17df54f35bd461587d95ad3d558719187848a2373648b8ddacc06a01a006accbc37e03311fa60d626f1aff2a151079ec3ddb4d51bfedfda"}, 0xe0) [ 430.859047] bond198: Enslaving bridge151 as a backup interface with an up link [ 430.859658] device bond198 entered promiscuous mode [ 430.859665] device bridge151 entered promiscuous mode [ 430.860039] IPv6: ADDRCONF(NETDEV_UP): bond198: link is not ready 17:02:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @offset=0x7, 0x0, 0x0, r1}) r3 = getpid() getpid() syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x341) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x2, 0x0, 0xffffffff, 0x81, 0x7, 0x1, 0x80, 0x9f9, 0x40}, 0x0) [ 430.860048] 8021q: adding VLAN 0 to HW filter on device bond198 [ 430.888016] IPv6: ADDRCONF(NETDEV_CHANGE): bond198: link becomes ready [ 430.909030] device bridge152 entered promiscuous mode [ 431.002586] bond198: Enslaving bridge152 as a backup interface with a down link 17:02:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:56 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup2(r2, r1) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x65, 0x0, 0x2, "141acdc03a2981b1709c071bf2eaffd6", "a3fc7c749b908828b3cd2c8f045a6b6a03432eefc70c5f77570780fa6c812429862ce9d95fbd8f31211664d1d533c80a0cbbfcaf0cf5fed061e8b53c2967768452784cc68874a961a53d77bd94b01ce7"}, 0x65, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) prctl$PR_SVE_SET_VL(0x32, 0x213a2) 17:02:56 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x7, 0x0, 0x0, {0x3, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xac3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 17:02:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r7, 0x200, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8010) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x400c004) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:02:56 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000000340)=""/233, 0xe9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r3, 0xdc, 0xdf}, 0x0, &(0x7f0000000100)="a1fc4e7ff878e100aa498289e64c2eb8a5accc26e0762499893bb9f896aefb3d0baf4c4ce2c8b28030bb119131efbd17d34ca3f30af78857f78926803225be01d5ab828bdead99b8215243e91b9b45c27f12f28ffb5745e18609d96fd87a3eb829a9f053617ac80f7269de6398807d928b116f2b47796449f1a4b15bac4d8ad179d51ff387684439371b54be1e4e2469a86ce2ed381225bc66345119ced729216a43c0b60c616de2497d90a0648a2f9b13592db28a3a04a82c224392b6ec59d9d0fbed3aa39233497f0773d9fbae2ee2ad4ec9d81907a6cc69b73e42", &(0x7f0000000200)="54ec651e8898e3e5ac47fc9a4f30adf8c4d0dc4290c816fee105c2a7d8d4d34f678b1fe46727fb2b00eccf39781d3fa00dc915eedbad87c159c44b93b4c85cb4afdc45ed15ced4d59e4d948ab9f063385c470dc45138035ffb870b94a5c671c77ea547e61c99c65f41cee517eec54bbccd01b14b0ea8d3b89649ea994cdf027bfcc5ca46db2db684c1ea2897411c6092f41d66be33512a88d5925577267bb1a5a222beb1a69014a9b1153db014f7bd576229de9e16ae49bd1b5aac43a4ad15a50c2a57a7a9c94876a8114c797567717c21cfbe268ef85e86ec9530e4fe546b") 17:02:56 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0xc, 0x1}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup2(r2, r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)=""/200, &(0x7f0000000100)=0xc8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r6}}, 0x18) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:56 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:02:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20008054}, 0x4004880) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000000c0)=0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 431.443873] bond199: Enslaving bridge153 as a backup interface with an up link [ 431.444332] device bond199 entered promiscuous mode [ 431.444339] device bridge153 entered promiscuous mode [ 431.444724] IPv6: ADDRCONF(NETDEV_UP): bond199: link is not ready [ 431.444731] 8021q: adding VLAN 0 to HW filter on device bond199 [ 431.445404] IPv6: ADDRCONF(NETDEV_CHANGE): bond199: link becomes ready [ 431.460370] device bridge154 entered promiscuous mode [ 431.460841] bond199: Enslaving bridge154 as a backup interface with a down link [ 431.640141] nla_parse: 17 callbacks suppressed [ 431.640148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.658813] bond200: Enslaving bridge155 as a backup interface with an up link [ 431.675178] device bond200 entered promiscuous mode [ 431.675184] device bridge155 entered promiscuous mode [ 431.675531] IPv6: ADDRCONF(NETDEV_UP): bond200: link is not ready [ 431.675539] 8021q: adding VLAN 0 to HW filter on device bond200 [ 431.681658] net_ratelimit: 4 callbacks suppressed [ 431.681662] bond200: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.714037] IPv6: ADDRCONF(NETDEV_CHANGE): bond200: link becomes ready 17:02:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 431.745093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.751905] device bridge156 entered promiscuous mode [ 431.752189] bond200: Enslaving bridge156 as a backup interface with a down link 17:02:56 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r9 = socket$packet(0x11, 0x2, 0x300) dup2(r9, r8) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80008444}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff10b}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x55c0}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x40}]}, @CTA_STATUS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4002000}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000005400)={'ip6gre0\x00', &(0x7f0000005380)={'ip6tnl0\x00', r7, 0x4, 0x7, 0x1c, 0x6, 0x8, @ipv4={[], [], @loopback}, @ipv4={[], [], @private=0xa010100}, 0x7, 0x8000, 0x2, 0x7fff}}) sendmsg$nl_route_sched(r1, &(0x7f00000054c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)=@gettclass={0x24, 0x2a, 0x320, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff1, 0x4}, {0x1, 0x8}, {0xffff, 0xfff1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040}, 0x800) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:56 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2ea281, 0x0) [ 431.837127] bond200: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.968187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 431.979838] bond7: Enslaving bridge7 as a backup interface with an up link 17:02:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x44, r5, 0x1, 0x0, 0x0, {0xb}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xc0fa}, {0x8, 0x13, 0x1}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x1) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="0000ea789245ccc32cf6ad0800d2846c59250000e60000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:56 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) read$eventfd(r1, &(0x7f0000000000), 0x8) 17:02:57 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) 17:02:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x5, 0x2, 0x9}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) [ 432.188723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 432.209947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8800) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x7fff, 0x4, 0x1}) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 432.340387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0xe772d67de39dad21, 0x2, 0x9b8, r1, 0x0, &(0x7f00000000c0)={0x9a091d, 0x1f, [], @ptr=0x6baa375d}}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x1, @my=0x1}, 0x10, 0x80800) r4 = accept4$nfc_llcp(r3, &(0x7f0000000500), &(0x7f0000000580)=0x60, 0x800) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010002508000019000000000000000000", @ANYRES32=r7, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:02:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 432.561299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:57 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:02:57 executing program 5: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup2(r3, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r8, @ANYBLOB="000006009d998a7a1c0012000c000100626f6e64000000000c000200080001000426d3ab556eaea4ea6e14007ef8deddec2afc792d813b033945f6811fdc13a2375c2acb0323e57f1b302e63b971ea23140df9dd97c73df21408e487ab063e2afd885157bc8a0be3d206ef04e40820376e2430825427f5daab3191f008aff7906aa08ddc477b8fb9f07cab5ad80a6820ab1330d09daad4"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r8, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'gre0\x00', r8, 0x1, 0x7800, 0x8, 0x8, {{0x10, 0x4, 0x1, 0xe, 0x40, 0x67, 0x0, 0x7, 0x0, 0x0, @private=0xa010102, @loopback, {[@noop, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x26, 0x0, [{0x1, 0xa, "8741bdeafdd9055f"}, {0x0, 0x10, "49f2d388553a1a3c55a4f27249a5"}, {0x1, 0x6, "58bc0b58"}]}]}}}}}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', r9}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r2, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 432.685941] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.797765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 432.820037] bond9: Enslaving bridge9 as a backup interface with an up link [ 432.820072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:02:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:57 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:57 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)=0x9) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xa37, 0xfdd, 0x3, 0x40}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) 17:02:58 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) waitid$P_PIDFD(0x3, r1, &(0x7f0000000000), 0x20000008, 0x0) 17:02:58 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xa4) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000300)={0xa0000, &(0x7f0000000240)="4439ea013cde53205473c9282ddb"}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:58 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000003da61d8a566be61b349e1a6dec6e9fedf1e0dbaa0aa8f16de2d94ef71b846ab53510ed59f7279701873588a8513f92089ec779297e21767312d524455032b9c15892b2b3e14dccbe5e8f476324d78fc4c65a6fb3aec00ab97bc2e88426b6bb88ef2052e16ade7fb2094ac1e8410539f7cd09752cde43895c99d20c5a1ac45a56ddac814ce6b79f285d23221846d137a0c5903710a7e7cf4c21eba8e0c2c390e4ca70aab9d56b9890a418297f181b8ab3999c0977f79941270262551f7671237001f784299c89d0f1a8d741d86422065f67cf61c94784f853f2ac4856eb110955ce83496351d3aac045e4209ebb80b4835f7dc85f4510bb2f1c5f9c8b228f9cc24a81625fe7ef4552", @ANYRES16=r3, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000030000000000", @ANYRES16=r3, @ANYRES64=r4], 0x160}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r5 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0xa, @fd, 0x0, 0x0, r7}) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x9, 0x2, 0x4, 0x300, 0xffffffff, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc053df4"}, 0x0, 0x1, @fd, 0xff00}) readv(r9, &(0x7f0000000100)=[{&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/171, 0xab}], 0x4) 17:02:58 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:58 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:02:58 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd727, 0x402180) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$FITHAW(r6, 0xc0045878) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000100)=""/238) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000000)) 17:02:58 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) [ 433.378340] bond203: Enslaving bridge158 as a backup interface with an up link [ 433.378505] bond203: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 433.378758] device bond203 entered promiscuous mode [ 433.378763] device bridge158 entered promiscuous mode [ 433.379396] 8021q: adding VLAN 0 to HW filter on device bond203 17:02:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) dup2(r2, r3) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r7 = dup2(r3, r6) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000100)={0x1, 0x2}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="7f3c0e0fc6a4196397e56d9b5bcf25f6e0ef5e0e2c6c244b76776aa27bca4a", 0x1f}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 433.478309] device bridge159 entered promiscuous mode [ 433.478838] bond203: Enslaving bridge159 as a backup interface with a down link 17:02:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={r3, 0x5}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYRES64=r3], 0x3c}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup2(r6, r5) ioctl$SNDCTL_DSP_GETBLKSIZE(r5, 0xc0045004, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newlink={0xac, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x4}]}}]}, @IFLA_MTU={0x8, 0x4, 0xffff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xc399}, @IFLA_PHYS_SWITCH_ID={0x4}]}, 0xac}}, 0x0) [ 433.493386] bond203: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:02:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:58 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:58 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:02:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x8010, r3, 0xc34c3000) 17:02:58 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/165, 0xa5}, {&(0x7f00000000c0)=""/175, 0xaf}], 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xedabe183de02e74b}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r3}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "0487ded8dc830a90"}, 0x10}, 0x1, 0x0, 0x0, 0x20008800}, 0x40010) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:58 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0\x00', 0x100}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:02:58 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:02:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:59 executing program 0: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) [ 434.158202] bond204: Enslaving bridge160 as a backup interface with an up link 17:02:59 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) [ 434.330374] bond205: Enslaving bridge161 as a backup interface with an up link 17:02:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0xfffffffb, 0x3}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:59 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:02:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:02:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:02:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0xb, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0xfd, 0x4, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0x9}) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000380)={0x3, "46b58103c173eb6651ad86dd30ae45bf9bca81821535873ebf2f04d47cfd13c7", 0x400, 0x5, 0x9, 0x1, 0x5}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) socket$packet(0x11, 0x2, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x2, {0xa, 0x4e24, 0x3, @empty, 0x7}}}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f00000009c0)=[{0x1010, 0x1, 0x1, "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"}], 0x1010}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:02:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) keyctl$read(0xb, r1, &(0x7f0000000340)=""/233, 0xe9) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='/dev/vbi#\x00', &(0x7f0000000080)) 17:02:59 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:02:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 434.810025] bond206: Enslaving bridge162 as a backup interface with an up link 17:02:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:59 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 434.859942] device bond206 entered promiscuous mode [ 434.867911] bond206: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.880570] device bridge162 entered promiscuous mode 17:02:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:02:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x80) [ 434.916485] IPv6: ADDRCONF(NETDEV_UP): bond206: link is not ready [ 434.916499] 8021q: adding VLAN 0 to HW filter on device bond206 [ 434.916949] IPv6: ADDRCONF(NETDEV_CHANGE): bond206: link becomes ready 17:02:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 435.023233] bond206: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300080000005bc3efecb6691ddbae10", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x3) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) fcntl$notify(r9, 0x402, 0x80000008) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:00 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup2(r2, r1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000180)={r7}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x440880, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x14c, 0x2, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0xb0, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @broadcast}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e20, 0xf429, @private2={0xfc, 0x2, [], 0x1}, 0xa62}}, 0x1, 0x562d, 0x317, 0x3, 0x1}, &(0x7f0000000140)=0x98) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:00 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:00 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) chmod(&(0x7f0000000080)='./file0\x00', 0x30) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x7fffffff, 0x1}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:00 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x66efa314, 0x28, 0x1ff000, 0x9}, 0x10) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r10 = socket$packet(0x11, 0x2, 0x300) dup2(r10, r9) getsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) dup2(r8, r7) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x100000, 0x0, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, "2c9d5a42"}, 0x0, 0x0, @fd=r5, 0x20080, 0x0, r7}) 17:03:00 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:01 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:01 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:01 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 17:03:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:01 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:01 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 436.716554] nla_parse: 16 callbacks suppressed [ 436.716560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x2, 0xff00}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xea, 0x0, "1c9d5a42"}, 0x0, 0x2, @fd}) [ 436.758637] bond208: Enslaving bridge165 as a backup interface with an up link [ 436.759008] bond208: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 436.759105] device bond208 entered promiscuous mode [ 436.759111] device bridge165 entered promiscuous mode [ 436.759798] 8021q: adding VLAN 0 to HW filter on device bond208 [ 436.766629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:01 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 436.872778] bond208: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 436.887145] device bridge166 entered promiscuous mode [ 436.887604] bond208: Enslaving bridge166 as a backup interface with a down link 17:03:02 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080001000437b7adb6f33fab6b5f0a3b65d1d9a706bcad131da7ea9368e3d878dc05c55a293d1695df817c72e14ab937c052c4b0a5cbfd77e9bc687a4b972d2117efa7b7d903e3d9df4d2a3184deab8c06335b4e9c0dec0e6213f1bc5602687b23925fc0ff53f5c15b02431c915e320d155c8be94b42d0e1040a3ccb586a2ad34a1576c70c7c7ef10115f24d5f9bb600f0e886ba686e18acea81940e"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2c0485, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000480)={0x1, 0x81, 0x8, 0x5c, 0x7f, 0x1, 0x7, 0x7, 0xfffffffffffffff7, 0x80000000, 0x55, 0x2}) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000100025080000e3fc1490b778b35a0000", @ANYRES32=r6, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:02 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:02 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:03:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="1f1af7e00343c221c6b98fe50bf4132ae283916e6498f8597578f4f8302100e9da4376a483e772aafd2ba6ac4eba440f63d710a694a884e359912602475b9560b1a24181cf555ff2c97d4b06551f9048", 0x50}], 0x1, &(0x7f0000000240)=[@iv={0xb8, 0x117, 0x2, 0xa1, "c227f57990e57d371388d6fe32f4bcec0d88ce9ab859786bf8dbaaa7997864ecd118d811e13c59730d2e287fc823609e47c5094a3520dcd68428fbb88be169fb7490dc149cbb4347974386f0cdd93e06ff0c21536ece6f14b4a6cf7cda292c17820be6a391ce58b4c5f172dca34134cc22f78314890faddc3b46adcabfa068afeb59eb5037e4f976c675da0434396f3e1dd03a6094b9047a60db6c9f737c5c0e73"}, @op={0x18}], 0xd0, 0x4004801}], 0x1, 0x4800) 17:03:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:03:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000180)=0x8001) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, {0x8, 0x7ffffc, 0x4, 0x1}}) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r3) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000140)=0x3) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r8, r7) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x8000, 0x9, 0x4, 0x2, 0xbfd, {r1, r2/1000+60000}, {0x5, 0xc, 0x3, 0xc3, 0x7, 0x3, "03113717"}, 0x101, 0x1, @fd=r3, 0x5, 0x0, r7}) 17:03:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) [ 437.621347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.629754] bond209: Enslaving bridge167 as a backup interface with an up link [ 437.661837] bond209: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 437.662195] device bond209 entered promiscuous mode 17:03:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 437.690423] device bridge167 entered promiscuous mode [ 437.690786] IPv6: ADDRCONF(NETDEV_UP): bond209: link is not ready [ 437.690797] 8021q: adding VLAN 0 to HW filter on device bond209 [ 437.693417] IPv6: ADDRCONF(NETDEV_CHANGE): bond209: link becomes ready [ 437.695659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.813779] bond209: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:02 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0xfffffffe) 17:03:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/null\x00', 0x24000, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) getsockname$packet(r7, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e80)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'syztnl1\x00', r9, 0x2f, 0xe0, 0x0, 0xef, 0x10, @mcast1, @dev={0xfe, 0x80, [], 0x1f}, 0x7800, 0x7800, 0x401, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:02 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x401, 0x0, @offset=0x9}) 17:03:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:03 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0xfffffffe) 17:03:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0xfffffffe) [ 438.289570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 438.324266] bond210: Enslaving bridge169 as a backup interface with an up link [ 438.328627] device bond210 entered promiscuous mode [ 438.328634] device bridge169 entered promiscuous mode 17:03:03 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 438.328972] IPv6: ADDRCONF(NETDEV_UP): bond210: link is not ready [ 438.328981] 8021q: adding VLAN 0 to HW filter on device bond210 [ 438.329868] bond210: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 438.330054] IPv6: ADDRCONF(NETDEV_CHANGE): bond210: link becomes ready [ 438.334667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="00a00600e60000001c0012000c00010064000000000c00020008000100044a8fae98af287bd0ab672a9399f946067eb83a3cac3b042dac656fb1179d303d6d2b7ad957ad56d08144346b8874a38bd948c2090058e9bcfb02c26556c63c244981acc43172e1b64bb7c48f3998bf2ae3e33cb4929a76cf4440e957e85045dda4f7e7eff1f6cdb7d4440bc429207def663525252d02a24299ceeb010add1b4656824dc2d7045880b734ce9dd75cea2575cb3a3c95d67db8e74dcba0d21368bc"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f00000000c0)=0x5) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 438.432592] bond210: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 438.439276] device bridge170 entered promiscuous mode [ 438.453796] bond210: Enslaving bridge170 as a backup interface with a down link 17:03:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 438.519512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:03 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 438.667215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x7) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2043000010002508000000000000000000f1fe9c", @ANYRES32=r6, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010003b0dfff300000000000000000000000716eda032685a7c61dcf83b72c9c79f233c88fc24acc9a9fda4f98cb54c6ba90586560f781a8dd91d1585a32fc44e3a091202d135766c89d9529aa6c6d182a3ed4d5c2024aedf4cf200fbaeb9933b98a410842b12575af41b6d09004838f15f7b57acaa298cde0000000000005d7ff3a9cc2d0291b9e17ba3efddad0122d59162abeb87c896b01935021a8b03f2711f10741e721e9ea072d14e14e6343a167b3fd36700e45e21cea40a795d34a530fffad7c5a06f94e831cf3c2455e8a3c3eb19dada357c57807d25da3021fc52f92c66", @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44425}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x34, 0x16, 0x200, 0x70bd25, 0x25dfdbfd, {0xa, 0x3f, 0x2c, 0x37, r3}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @rand_addr=0x64010100}}, @IFA_FLAGS={0x8, 0x8, 0x108}]}, 0x34}}, 0x45) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r6, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r6, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 439.334764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.352776] bond212: Enslaving bridge171 as a backup interface with an up link [ 439.358135] device bond212 entered promiscuous mode [ 439.360250] bond212: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 439.375115] device bridge171 entered promiscuous mode 17:03:04 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 439.375509] IPv6: ADDRCONF(NETDEV_UP): bond212: link is not ready [ 439.375518] 8021q: adding VLAN 0 to HW filter on device bond212 [ 439.379890] IPv6: ADDRCONF(NETDEV_CHANGE): bond212: link becomes ready [ 439.474107] bond212: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 439.480646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x20, 0x70bd2a, 0x25dfdbff, {0x2, 0x80, 0x0, 0xff, 0x7f, 0x0, 0x0, 0x8, 0x9}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x102}, @FRA_FLOW={0x8, 0xb, 0xc65}]}, 0x30}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r8}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r8, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000300)={r8, 0x9, 0x973e}, 0x8) 17:03:04 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 439.697159] bond214: Enslaving bridge173 as a backup interface with an up link [ 439.763278] bond214: Enslaving bridge174 as a backup interface with a down link 17:03:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80, 0x1, 0x3, 0xd, 0x3, 0x8ab0}, &(0x7f0000000240)=0x20) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000010) 17:03:04 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 440.002132] bond215: Enslaving bridge175 as a backup interface with an up link [ 440.003030] device bond215 entered promiscuous mode [ 440.003037] device bridge175 entered promiscuous mode [ 440.003366] IPv6: ADDRCONF(NETDEV_UP): bond215: link is not ready [ 440.003374] 8021q: adding VLAN 0 to HW filter on device bond215 17:03:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c002000100000000066adc3a1c89d2753bc43aa0010000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x301, 0x0) ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000000300)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000250800"/20, @ANYRES32=r5, @ANYBLOB="29e702d685de0000"], 0x20}}, 0x0) [ 440.005413] bond215: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 440.005472] IPv6: ADDRCONF(NETDEV_CHANGE): bond215: link becomes ready [ 440.006527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10268 comm=syz-executor.2 [ 440.033671] device bridge176 entered promiscuous mode [ 440.034157] bond215: Enslaving bridge176 as a backup interface with a down link [ 440.113770] bond215: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:05 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', {}, 0xf000}) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc1a}, {0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, [], 0x9}, 0x401}, 0x0, [0x4000, 0x3, 0x1000000, 0x4, 0x800, 0x8, 0x3]}, 0x5c) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 440.505600] bond216: Enslaving bridge177 as a backup interface with an up link [ 440.514475] device bond216 entered promiscuous mode [ 440.519703] device bridge177 entered promiscuous mode [ 440.520070] IPv6: ADDRCONF(NETDEV_UP): bond216: link is not ready [ 440.520080] 8021q: adding VLAN 0 to HW filter on device bond216 [ 440.520661] IPv6: ADDRCONF(NETDEV_CHANGE): bond216: link becomes ready 17:03:05 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet6(r2, &(0x7f0000000400)="86cf476a5251fb8f88a1987983e3b4b28d51cf6849dcf7635dcb7d21be11c8c086d82378129ee9097ada32c26e1e1ae4754b7b9d5668f9cf287ef49dfbce6f46ca2da1", 0x43, 0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800f8a604"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x100000, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000003c0)) 17:03:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 440.840352] bond218: Enslaving bridge179 as an active interface with an up link [ 440.848430] device bond218 entered promiscuous mode [ 440.865424] device bridge179 entered promiscuous mode [ 440.871500] 8021q: adding VLAN 0 to HW filter on device bond218 17:03:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="80000000988a584d5a67c84b", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_GET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000003c0)={0x7, 0x8, 0x1, 0x401}, 0x10) [ 440.900779] device bridge180 entered promiscuous mode [ 440.901238] bond218: Enslaving bridge180 as an active interface with an up link 17:03:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 441.099082] device bond219 entered promiscuous mode [ 441.099345] IPv6: ADDRCONF(NETDEV_UP): bond219: link is not ready [ 441.099354] 8021q: adding VLAN 0 to HW filter on device bond219 17:03:06 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x9, &(0x7f0000000380)=[{0x6, 0x1f, 0x2, 0xa7}, {0x4, 0x9, 0x0, 0x5}, {0xde, 0x7, 0x73}, {0x0, 0x4c, 0x9, 0xfffffe00}, {0x101, 0x35, 0x9, 0xfffeffff}, {0x5, 0x3f, 0x0, 0x80000000}, {0x2e, 0x20, 0x0, 0x4}, {0x8, 0x2f, 0x81, 0x7}, {0xfff7, 0x5, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="005a4516785917adc10503a02db6243c00000000e6000072570012000c00010062"], 0x3c}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000400)={0x3, 0x7, 0x4, 0x40, 0xfff, {0x0, 0x2710}, {0x3, 0xb, 0x47, 0x80, 0x6, 0x7, "d9c19bc0"}, 0x8bd, 0x2, @offset=0xa05a5aff, 0x4, 0x0, r6}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000009190000", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x1578, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x1530, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}]}, {0x88, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3f}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8}]}}]}, {0x10, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}]}, {0x1334, 0x1, 0x0, 0x1, [@match={{0xa, 0x1, 'match\x00'}, @val={0x12e8, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_INFO={0x66, 0x3, "ea10d181bfcb8c1a56c6c79ac1ea365b0b240ca080abbc566f51cda71021322adffc0a8ba482ecba65076f13d923818321ede6ef5f99b039bda4c533a024f339918f4aaef5a6029ac7eaf109aed6e867f789129610d3270bfb86b1e1b266fe83c4a5"}, @NFTA_MATCH_NAME={0xe, 0x1, '/dev/vbi#\x00'}, @NFTA_MATCH_INFO={0xf0, 0x3, "383e9bac5eb9e8cc560ba773b3500ef6cdf3746440ea14f98ec28e3ef59e0523464d3579e014529a1f556365576e92e27172bd9ee9c91353ef346635555a6389f3d9da75aa71fc5890195a516607776119e5cc9666775d92374506efe335ef2950d59345ee23e0ba658d1a94fcdf800cced21aa607f255f4277043fba037352073f5eb530321a0aee1a869611e5a7ad5192d79d7ad9434a9313b0c5271229d1828691f20fce550afc273d6e2da78159e6414db07d063398bf6837874d0619b9c4aa4d134de59f4e7598840f2276c5ecc08910eccd969e0b525682a9765cc7604542c37179e1ec57f677b7798"}, @NFTA_MATCH_INFO={0x6f, 0x3, "78f14581c8040309e3b3b8657e5da0b3f87c76f0bfb54846fe4fb089280c04f39bb3ee3d72d39c5a98cf395b1b98ffe80756adc189ad63ba075ce2855264f1b9b38b2047ebb5ca5927536c5a6a0f62e89bb4b2b774f16e22c2fc2b568d13dffdf60ce071b164cdfb55d9e0"}, @NFTA_MATCH_NAME={0xe, 0x1, '/dev/vbi#\x00'}, @NFTA_MATCH_NAME={0xe, 0x1, '/dev/zero\x00'}, @NFTA_MATCH_INFO={0xe6, 0x3, "56a306d86fadb515c7520c063b2ade767de0ab3383193790293f8033d22504ca3109fbcc6379c387c46d3cb5fb38908ce0b861a1442ded8ddb5e9e99792e4d93c0715d4634469eaa46b0c5a4c086c0e5bfab1df7cb5c4e4f4299b6b744fa012fe7365da0924c9a4c0519776820c74cbe6c7f24c2161635eeda8f12f3c0ace34715663e3d09985dea5199be413f33f0203d693d8f8591c52c845a735ab05bc886b1887faf03071b72ab70ae4e6d6389adaa9026e081a34dd6230d59fe5d02da7f0fd190785105a2688c482aa5f965915b3bcce842c521311b13c1c5dfd8351ec06992"}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}]}, {0xb8, 0x1, 0x0, 0x1, [@quota={{0xa, 0x1, 'quota\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}]}, {0x58, 0x1, 0x0, 0x1, [@nat={{0x8, 0x1, 'nat\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_KEY={0x8}]}}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWRULE={0x47c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x210, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}]}, {0x12c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xfc}, @NFTA_TARGET_NAME={0xe, 0x1, '/dev/vbi#\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TARGET_INFO={0x1a, 0x3, "84ac5fc648dd364dda82f6e7afd65c46612b9da8852b"}, @NFTA_TARGET_INFO={0x66, 0x3, "7e11170622da383b3d295e39263cbdae1593b176096dcdc6bba5d7992fbd72693027dc9d093aa2490fa1af370eead8bf17e22d42dd9b2ff7ec0028a9001b429cd167c1982ed5dafeb509efd85e920f7ef99d47718f4513791340755a1cbb8e49fff7"}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}]}, {0xd0, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x20}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}]}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xa, 0x7, 0x1, 0x0, "3a9e1a57055a"}, @NFTA_RULE_EXPRESSIONS={0x244, 0x4, 0x0, 0x1, [{0x1c4, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @val={0x110, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, '/dev/zero\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TARGET_INFO={0xe9, 0x3, "fe63996167ce3058f65e5c569f9d7058092666055532506d6cf0c40e63cffe9ca7b85529bc6f58cb8e5096fa57c06dff5f06e07d6f65c321663870a33649777404a475f1295e58284da2572543440ee6c0e783bbddc5dc8f5189e8b256af6248447e1a2c75a4a9766173da747a8263420c04dc9f2943111c2d3b52cdbda8030cffcc9a7b0ab62244079453f0b1aed587188a9c583f794b5b5642544a8d79465bb145eb44896e357a5ccfa9a760c4b34a968395a73e9c2f9790902df0d8018eb06b4232b57c7566dbc20c0250a5cc0c740da948f48791e3a69b45f931f31f2aba3afcd7df95"}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x6c693599228079fc}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}]}}]}, {0x7c, 0x1, 0x0, 0x1, [@bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0xfffffe06, 0x2, 0x1, 0x0, 0x7}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}]}]}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14}}, 0x1a58}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:06 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x14002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000240)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$isdn(0x22, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 441.401223] NOHZ: local_softirq_pending 08 17:03:06 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000380)=""/76) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:06 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 441.999586] nla_parse: 17 callbacks suppressed [ 441.999593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.032761] bond221: Enslaving bridge181 as a backup interface with an up link [ 442.033505] device bond221 entered promiscuous mode [ 442.033513] device bridge181 entered promiscuous mode [ 442.033857] IPv6: ADDRCONF(NETDEV_UP): bond221: link is not ready [ 442.033866] 8021q: adding VLAN 0 to HW filter on device bond221 [ 442.037388] net_ratelimit: 2 callbacks suppressed [ 442.037393] bond221: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 442.037461] IPv6: ADDRCONF(NETDEV_CHANGE): bond221: link becomes ready [ 442.038453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.056974] device bridge182 entered promiscuous mode [ 442.059963] bond221: Enslaving bridge182 as a backup interface with a down link 17:03:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$TIOCMSET(r5, 0x5418, &(0x7f00000000c0)=0xe0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 442.142504] bond221: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 442.301352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.311196] bond222: Enslaving bridge183 as a backup interface with an up link [ 442.345475] device bond222 entered promiscuous mode [ 442.345482] device bridge183 entered promiscuous mode [ 442.345850] IPv6: ADDRCONF(NETDEV_UP): bond222: link is not ready [ 442.345860] 8021q: adding VLAN 0 to HW filter on device bond222 [ 442.346507] bond222: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 442.378488] IPv6: ADDRCONF(NETDEV_CHANGE): bond222: link becomes ready [ 442.406707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.421283] device bridge184 entered promiscuous mode [ 442.421993] bond222: Enslaving bridge184 as a backup interface with a down link 17:03:07 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000002a870000000043aaf6f27ed54b0c000000180005800c00028008000300a001000007"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x144, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa4d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x83}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca54}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa18}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x68c602d5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8010}, 0x54) r9 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x5101c0) r10 = socket$packet(0x11, 0x2, 0x300) dup2(r10, r9) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 442.508759] bond222: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 17:03:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 442.671708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) [ 442.709126] bond223: Enslaving bridge185 as a backup interface with an up link 17:03:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0xfffffffe) [ 442.709684] device bond223 entered promiscuous mode [ 442.709690] device bridge185 entered promiscuous mode [ 442.710022] IPv6: ADDRCONF(NETDEV_UP): bond223: link is not ready [ 442.710031] 8021q: adding VLAN 0 to HW filter on device bond223 [ 442.713577] bond223: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0xfffffffe) [ 442.713862] IPv6: ADDRCONF(NETDEV_CHANGE): bond223: link becomes ready [ 442.754185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.777653] device bridge186 entered promiscuous mode 17:03:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0xfffffffe) [ 442.778293] bond223: Enslaving bridge186 as a backup interface with a down link [ 442.823262] bond223: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:07 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x7}, {}], 0x2) semop(0x0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000400)=""/78) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32], 0x3c}}, 0x48814) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYBLOB="000000000000000e08000a416f094017788b9809902e7d33f600ce033b55b918662194f1b9863da610a0c08f4162ba6d062637a6fb6835e6de789835", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$sock_netdev_private(r5, 0x89fa, &(0x7f0000000380)="ca0e0b93ff5238c3acd12fb3cb3e2f9f55f3a34074ef38027cbaea5a5254d7b91be092b165c00233f898a00cc66fb5d8e099b4e8f78b5c9a0222cf51b04af517813bc7522700718b") getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\b\x00'/20, @ANYRES32=r7, @ANYBLOB="dbe302de00000000"], 0x20}}, 0x4004885) 17:03:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:08 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$TIOCMSET(r5, 0x5418, &(0x7f00000000c0)=0xe0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffffffbe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000250800"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) iopl(0x5) [ 443.579114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.608553] bond224: Enslaving bridge187 as a backup interface with an up link 17:03:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 443.608604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 443.631901] bond6: Enslaving bridge5 as a backup interface with an up link [ 443.634831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x4, 0x2, 0xfffffffffffffffc, 0x8fea, 0x3, 0x8, 0x5d6, 0x3, 0x80000000, 0x0, 0x8, 0x2, 0x0, 0xd800000000000000, 0x4], 0x4, 0x24004}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d070c000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="0003000005000000000012000c000100626f6e6400000066c2bc8e52dc9ee9b1f1c756b04722000c0002000800010004c3991bcb4aa577d76fcf5f4fa7efbfefcf2168224c309202655c64cb6ac4334c4dad74398f7563ac3fe569494926a2e5f2b6b5960f1186418db775eec81b48989db7607240ef3e7ab20131441f0856c529d94529bbe8b7c7aa892bdb7c643322fed6bceb4ecce7d5e75afbdf70d459120f93bfea7c42f06a"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000240)='veth0_to_team\x00') r4 = socket(0x25, 0x8, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r7}) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:08 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 443.751481] device bond6 entered promiscuous mode [ 443.751489] device bridge5 entered promiscuous mode [ 443.751899] IPv6: ADDRCONF(NETDEV_UP): bond6: link is not ready [ 443.751909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.753607] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 443.758397] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready 17:03:08 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 443.835482] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.862307] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:08 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:08 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:08 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x12042, 0x0) write$FUSE_POLL(r4, &(0x7f0000000240)={0x18, 0x0, 0x6, {0x5}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff3fd000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r9 = socket$packet(0x11, 0x2, 0x300) dup2(r9, r8) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f0000000380)={'veth1_to_batadv\x00', 0x3ff, 0xcfd}) [ 444.280402] bond226: Enslaving bridge190 as a backup interface with an up link [ 444.280876] device bond226 entered promiscuous mode [ 444.280882] device bridge190 entered promiscuous mode [ 444.281207] IPv6: ADDRCONF(NETDEV_UP): bond226: link is not ready [ 444.281215] 8021q: adding VLAN 0 to HW filter on device bond226 [ 444.282678] bond226: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 444.282868] IPv6: ADDRCONF(NETDEV_CHANGE): bond226: link becomes ready 17:03:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:03:09 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:09 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:09 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 444.392306] bond226: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:09 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:09 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x70, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x87acd6d79a4ae73c}, 0x20040004) fchdir(r2) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff017f9b010e4a17e7000000080039"], 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000011b0d0d0700000000fe03000000000014216d04691bf37818e213d042f78002d611c1e4891a390a1de72756b94da0b97d2dc2f310fac717f0c2000800", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32, @ANYBLOB="140003000b88f4b9292ac74894c4"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0a1ff61141cc9feb2bb1", @ANYRES32=r7, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x18, 0x1410, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x40001) 17:03:09 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:09 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:09 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b0dfff3000000f3ffffff000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, 0xffffffffffffffff) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000300)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 445.011374] device bond228 entered promiscuous mode [ 445.011764] IPv6: ADDRCONF(NETDEV_UP): bond228: link is not ready [ 445.011774] 8021q: adding VLAN 0 to HW filter on device bond228 17:03:10 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) 17:03:10 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:10 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1, 0x4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:10 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:10 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:10 executing program 4: accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:10 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:10 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 445.531893] bond229: Enslaving bridge192 as a backup interface with an up link [ 445.533217] device bond229 entered promiscuous mode [ 445.573016] device bridge192 entered promiscuous mode [ 445.574055] IPv6: ADDRCONF(NETDEV_UP): bond229: link is not ready 17:03:10 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 445.617579] 8021q: adding VLAN 0 to HW filter on device bond229 [ 445.626125] IPv6: ADDRCONF(NETDEV_CHANGE): bond229: link becomes ready 17:03:10 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:10 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:10 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000000fb008000005c7d901b3e445fa17f4607", @ANYRES32=r3, @ANYRES32=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@dellink={0x30, 0x11, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x62500, 0x2}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4998}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x28000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:10 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 446.089459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=251 sclass=netlink_route_socket pid=11212 comm=syz-executor.2 [ 446.101684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=251 sclass=netlink_route_socket pid=11214 comm=syz-executor.2 17:03:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40802}, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 446.354043] bond231: Enslaving bridge194 as a backup interface with an up link [ 446.354525] device bond231 entered promiscuous mode [ 446.354532] device bridge194 entered promiscuous mode [ 446.355437] 8021q: adding VLAN 0 to HW filter on device bond231 [ 446.397190] device bridge195 entered promiscuous mode [ 446.397689] bond231: Enslaving bridge195 as a backup interface with a down link 17:03:11 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0x9, &(0x7f0000000240)=0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000000", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/49, 0x31) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 446.633195] bond232: Enslaving bridge196 as a backup interface with an up link [ 446.676911] bond232: Enslaving bridge197 as a backup interface with a down link 17:03:11 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, @l2={0x1f, 0xfff, @fixed={[], 0x12}}, @can={0x1d, r5}, @l2={0x1f, 0xffff, @fixed={[], 0x11}, 0xff, 0x1}, 0x6, 0x0, 0x0, 0x0, 0xe05a, &(0x7f00000000c0)='veth0_macvtap\x00', 0x8, 0x4, 0x3}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x44) 17:03:11 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:11 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 447.139692] nla_parse: 15 callbacks suppressed [ 447.139698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.163292] bond233: Enslaving bridge198 as a backup interface with an up link [ 447.191114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.229922] bond233: Enslaving bridge199 as a backup interface with a down link 17:03:12 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff030000000000104978d2b5a0857c37ee20c32b2a8206025d1b18c8c236557f4239fa1a277c5e74438773bba6061a609e9dae465c453a11cdd31f2a95fd21ae8b18b2b0a2975a27edc3197f22e2733a51bcc82a8008d896c11fd112b72758d6e53ccde93223553b31ba9c6e4f26ab86b193c0fe2a361c38657ad20b5065edcc698ae14d35cff4b4cc3b04e31b8d3b334b3f83f9465dd00ad5dcc2d8c8eb784ec5c4874257cea1eaadbb435e34d03732a4dff733ab3cac650b7158d92a4688113a63fd0929072ed156e90de65a0491ada726fa3a04233ce7edce6ad2de71cb9b1ae7", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 447.439434] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.440010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.548034] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.548175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:12 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:12 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r2, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x7fff]}, &(0x7f0000000240)=0x6) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:12 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 447.957758] device bond234 entered promiscuous mode [ 447.958005] IPv6: ADDRCONF(NETDEV_UP): bond234: link is not ready [ 447.958015] 8021q: adding VLAN 0 to HW filter on device bond234 17:03:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:13 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="005b35a1c823725bf52318070c000100626f6e710002000000fdba167df2e2072c46997a708a3d61e9d4d49262b9cd7dd8b16e014581f3a85f9802d6cb28b1dd1960370deeea07adca11166b6077910e0881b918ef56e75ad3ac5febd0d16a1e5e5894797ce49fa6c09f6c3e6857e2c55ed1f7e88c2e167eeb0484b67e27ac75747084faee1b0f8cd5c76f2e9f4af62540d4bb1d5761f4f703700582d11e0900585eef9b89158ea43a2f5fc1c194f86a72d1cecd2ac691b82f34c0b2ec51f85c66e3e4379f4efbd43dc190f46ca27295361d87e32f31e9bb5b93a7e840ca97fd"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:13 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:13 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) [ 448.316556] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.317029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.443751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.443893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:13 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:13 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:13 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:13 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:13 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:13 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:03:13 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) [ 449.004763] bond235: Enslaving bridge200 as a backup interface with an up link [ 449.005259] device bond235 entered promiscuous mode [ 449.005266] device bridge200 entered promiscuous mode [ 449.005595] IPv6: ADDRCONF(NETDEV_UP): bond235: link is not ready [ 449.005605] 8021q: adding VLAN 0 to HW filter on device bond235 [ 449.009147] net_ratelimit: 4 callbacks suppressed [ 449.009151] bond235: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 449.009422] IPv6: ADDRCONF(NETDEV_CHANGE): bond235: link becomes ready [ 449.045199] device bridge201 entered promiscuous mode [ 449.046893] bond235: Enslaving bridge201 as a backup interface with a down link [ 449.113025] bond235: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:14 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:03:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100000010002508000100cc707b1c78534d4300", @ANYRES32=r5, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) 17:03:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c9d5a42"}, 0x0, 0x0, @fd}) [ 449.710018] bond236: Enslaving bridge202 as a backup interface with an up link [ 449.740540] bond236: Enslaving bridge203 as a backup interface with a down link 17:03:14 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x1f3000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000240)=0x8, 0x4) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4200, r4, 0x4726, 0x100071) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000300)="ad3753524739bcafec2f49181cfdcd6ce7fba725aa49a1f1d8c657", 0x1b) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 449.941271] bond237: Enslaving bridge204 as a backup interface with an up link [ 449.947841] device bond237 entered promiscuous mode [ 449.955319] bond237: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 449.959084] device bridge204 entered promiscuous mode [ 449.977209] IPv6: ADDRCONF(NETDEV_UP): bond237: link is not ready [ 449.977225] 8021q: adding VLAN 0 to HW filter on device bond237 17:03:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYRES16=r4], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x3, @local, 0x4a02dfcd}, @in={0x2, 0x4e21, @multicast2}], 0x2c) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 449.977893] IPv6: ADDRCONF(NETDEV_CHANGE): bond237: link becomes ready [ 450.000487] device bridge205 entered promiscuous mode [ 450.000974] bond237: Enslaving bridge205 as a backup interface with a down link 17:03:14 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 450.083300] bond237: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="40fa6bf2ff8d0f2608000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000e31000002100"/20, @ANYRES32=r5, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) [ 450.190582] device bond238 entered promiscuous mode [ 450.190825] IPv6: ADDRCONF(NETDEV_UP): bond238: link is not ready [ 450.190834] 8021q: adding VLAN 0 to HW filter on device bond238 17:03:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d07000083740000ff0300000000", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 450.391309] bond239: Enslaving bridge206 as a backup interface with an up link [ 450.410734] bond239: Enslaving bridge207 as a backup interface with a down link 17:03:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 450.579549] bond240: Enslaving bridge208 as a backup interface with an up link [ 450.579719] bond240: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.580498] device bond240 entered promiscuous mode [ 450.580505] device bridge208 entered promiscuous mode [ 450.581723] 8021q: adding VLAN 0 to HW filter on device bond240 17:03:15 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 450.692039] bond240: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:15 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 450.904400] bond242: Enslaving bridge210 as a backup interface with an up link [ 450.905756] device bond242 entered promiscuous mode [ 450.905764] device bridge210 entered promiscuous mode [ 450.906115] IPv6: ADDRCONF(NETDEV_UP): bond242: link is not ready [ 450.922815] bond242: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.924197] 8021q: adding VLAN 0 to HW filter on device bond242 17:03:15 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 450.953005] IPv6: ADDRCONF(NETDEV_CHANGE): bond242: link becomes ready 17:03:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="0dad4d320f480229a89b86000010000000000000", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x4, 0xaac, 0x9, 0x480, 0x17d, 0x43100002}) dup2(r4, r3) recvfrom$x25(r3, &(0x7f00000000c0)=""/12, 0xc, 0x22, &(0x7f0000000240)={0x9, @null=' \x00'}, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000000000000000908000a00e6c046d70a88c1f6ef439119dd3377e3e47eddac678f287e6537875738c30000009aea376c5bebf85eaa8c80512d9b0504bb40aec1b4f5d9115c56bf27016634e0d31280dd7e4d82c2c952e5e748dba6b0bb0bfd085a", @ANYRES32=r2, @ANYBLOB="140012000b000100627269646765b3e3169bfe1ce77df4c59b27f8c886431831a93f9575b727751f73f8e859bd63b62b84686a4f9242c932554f6ce0c362f91a7dc9831e28cd03878da13be4f57f88bf40452eeec069131f3214bb7fb6f6065eb0b5f972f10d1fba105ae5da61906a6e597916ba3035e746abab74139d7175672ac47623424ccc83095ac4a47b7955894c3a16735e3320c1def948e3"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff24, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xedabe183de02e74b, 0x24d}}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x11) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000480)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) [ 451.062105] bond242: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x240000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x328, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TX_RATES={0x2d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, "d6d2644eab9ec34475e59c5c4c534782d8b21fa06e1eff92"}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "6f24f0adcc4e077fd478bafcf2b3b96affc56254fd7092e0b4979bbb"}]}, @NL80211_BAND_2GHZ={0x14, 0x0, [@NL80211_TXRATE_LEGACY={0xa, 0x1, "663bd4e5b79e"}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x84, 0x2, [@NL80211_TXRATE_HT={0x20, 0x2, "06d07b8f2d9b8c5139c5f5cd5c779996d432607f8aa946e37ddc7068"}, @NL80211_TXRATE_HT={0x40, 0x2, "727ad0d00c2361608682f77d7f40bd352eb36b895166d5692e2fd8b02ea628cc2874dcc9c9390d5bc66314365cdbdaa9e930026f48d408a6aebeb924"}, @NL80211_TXRATE_LEGACY={0x17, 0x1, "12dafeb8e57e9d3bc8b8c36e696056305680f3"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, [@NL80211_TXRATE_HT={0x20, 0x2, "d885214acaf5a3016bd325bdf23798eed1348353a56d5a3843d19c6c"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xe69f, 0x20, 0xff, 0xa6d, 0xf800, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x362, 0x0, 0x3f, 0x2, 0x438, 0x7, 0xc76b]}}, @NL80211_TXRATE_HT={0x23, 0x2, "9073aa7c1b8e3a37dbc9e004e881bb9db2a5ebd6a7469b35ddb278c68e26bd"}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, "0361b16a976114dab5ffd28b34051dc7cfbd49dce2ba042eed3d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0x6, 0x4, 0xcec, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, "a5e46081b0100e9a65a26aad640a2c480eb2a4dd79a2f2f68304f96e27803f9d0a7cad9676aba71de830a4d69544290588"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x4, 0x400, 0xfff, 0xfc00, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x3a, 0x2, "4460b440a3f2cfd92c67f84aa851745b8b545c586a10f91d4afb140ee2b3742ce34a0bb01c832764e61b549d8bd93a73e49d1857594e"}]}, @NL80211_BAND_6GHZ={0x28, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, "5b397be0732462acb36dba837dbdea"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, "b37f566e6e48"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, "ea770b6248f86179e50dec"}, @NL80211_TXRATE_HT={0x50, 0x2, "790ab3f065b9aeeccdf7b19d0770593197bffeea244bc098a6e7b2b3e04e92f1a65337c2ef9905789956b8e628f6b6104914085910befd667f0107557175d387672f964e6712ad496c3b628d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x2, 0xf99, 0x101, 0x0, 0x8001, 0x1de]}}]}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401}}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SSID={0x7, 0x34, "9c7021"}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000000}, 0x9af1f68b84e3817a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x0, 0x208, 0x208, 0x2f0, 0x2f0, 0x2f0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e578a8bb29d3a34e72c4ca1d39bb86d817e36c488002316607ef6fc20b60"}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00', {0x3}}}}, {{@arp={@multicast1, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 0x0, 0xe, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x800, 0x856, 0x1f, 0x1f, 0x3, 'veth1_to_bridge\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x226}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x428) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 451.513786] bond244: Enslaving bridge212 as a backup interface with an up link [ 451.518260] device bond244 entered promiscuous mode [ 451.531422] bond244: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 451.536539] device bridge212 entered promiscuous mode [ 451.546700] IPv6: ADDRCONF(NETDEV_UP): bond244: link is not ready 17:03:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000440)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000000cd7855a6ab944101ee4f000000000000", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000094d2fa5b93d44d75c5000000", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x26, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r8, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000250800"/20, @ANYRES32=r9, @ANYBLOB="43e7eb2a00000000b1c3faa6a1ef74f8d674fb47579dddff713d79c3afd3f692d7e24c9fc4457b4dba62dfe91eb3ad7ab8b4e209f30014c3a4cf84"], 0x20}}, 0x0) 17:03:16 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 451.546711] 8021q: adding VLAN 0 to HW filter on device bond244 [ 451.547146] IPv6: ADDRCONF(NETDEV_CHANGE): bond244: link becomes ready [ 451.563622] device bridge213 entered promiscuous mode [ 451.587344] bond244: Enslaving bridge213 as a backup interface with a down link [ 451.633110] bond244: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 451.664112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30925 sclass=netlink_route_socket pid=12021 comm=syz-executor.2 17:03:16 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 451.739673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30925 sclass=netlink_route_socket pid=12023 comm=syz-executor.2 17:03:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff00000010f1250800001e0000374642dc400000", @ANYRES32=r5, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)={r5, 0x7fff, 0xe9, "e28716cde7392bed1364f40d5b0b95b62ae4c264ad9829840b11b1311115a06a6d33316875b7d0d4f01848f1fd3ea82ada3e56f4b04dd609ba29bb6d93cc0b9d8ea1f84575411595758dc8078958c3f2a31ceacaf0744d3489dc362583b8ce2cb5582aa1c9f1f505b7e7821aeac244344df9598cc9419f6ee6c548db2cd305ecb2789ec8561ddfd7431fc8cacfedbe02c42893d1368378368858421e4950a5edc2365668a743314fd729aa42202e0870e073a03716ddfe72ad65b990a3b40d49a04ce345672f56222aa6b75e04e1159a671eab4de1ef35d6adf4ec2e06586cde94a21b0ee80356eba6"}, 0xf1) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="23945637a2c4d0fa2eabb5e4c563e96355ec52b9", @ANYRES32=r7, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004", @ANYRESHEX], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0xa, 0x80000, 0xfff) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200400b0}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 451.928029] bond245: Enslaving bridge214 as a backup interface with an up link [ 451.950687] bond245: Enslaving bridge215 as a backup interface with a down link 17:03:16 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:17 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250841c33b1888ae5c5971ece6a0e700000000000000", @ANYRES32=r6, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 452.358273] nla_parse: 22 callbacks suppressed [ 452.358280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.375546] bond246: Enslaving bridge216 as a backup interface with an up link [ 452.390143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) eventfd2(0x7fe0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x402f80, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xd6, 0x109440) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000240)=0x40b5) [ 452.418800] bond246: Enslaving bridge217 as a backup interface with a down link 17:03:17 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 452.555728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.574501] bond247: Enslaving bridge218 as a backup interface with an up link [ 452.575061] device bond247 entered promiscuous mode 17:03:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f00000000c0)={0x31, 0xd, @name="92bf6b6fbaf4bad469d76c038c278bb14130cde350f5685699e6162a4274119b"}) [ 452.575068] device bridge218 entered promiscuous mode [ 452.575872] 8021q: adding VLAN 0 to HW filter on device bond247 [ 452.596253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.612061] device bridge219 entered promiscuous mode [ 452.612559] bond247: Enslaving bridge219 as a backup interface with a down link 17:03:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r4, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250841c33b1888ae5c5971ece6a0e700000000000000", @ANYRES32=r6, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) [ 452.768533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.799731] bond248: Enslaving bridge220 as a backup interface with an up link [ 452.800768] device bond248 entered promiscuous mode [ 452.823059] device bridge220 entered promiscuous mode [ 452.826280] IPv6: ADDRCONF(NETDEV_UP): bond248: link is not ready [ 452.847026] 8021q: adding VLAN 0 to HW filter on device bond248 [ 452.847494] IPv6: ADDRCONF(NETDEV_CHANGE): bond248: link becomes ready [ 452.908352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:17 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:17 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 453.039675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:03:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'virt_wifi0\x00', 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x42200, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000240)={0x18, 0x0, 0x4, {0x8}}, 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010400d0700250000ff0300000010", @ANYRES32=r6, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r6, @ANYBLOB="940012000b0001206272696467656b671e150200000000000000cdcef5240b0b661ae162d2b2f2ddd5ba144f759be368"], 0x3c}}, 0x0) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000250800"/20, @ANYRES32=r8, @ANYBLOB="4be702de00000023"], 0x20}}, 0x0) [ 453.068901] bond7: Enslaving bridge6 as a backup interface with an up link 17:03:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 453.143317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=12315 comm=syz-executor.2 [ 453.143506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) [ 453.201138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=12315 comm=syz-executor.2 [ 453.201266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 453.371446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 453.381582] bond250: Enslaving bridge222 as a backup interface with an up link [ 453.413517] device bond250 entered promiscuous mode [ 453.413522] device bridge222 entered promiscuous mode 17:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x5, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 453.414142] 8021q: adding VLAN 0 to HW filter on device bond250 [ 453.432620] device bridge223 entered promiscuous mode [ 453.442647] bond250: Enslaving bridge223 as a backup interface with a down link 17:03:18 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 453.590003] bond251: Enslaving bridge224 as a backup interface with an up link [ 453.600622] device bond251 entered promiscuous mode [ 453.600629] device bridge224 entered promiscuous mode 17:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000410003b0dfff300f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 453.600949] IPv6: ADDRCONF(NETDEV_UP): bond251: link is not ready [ 453.600958] 8021q: adding VLAN 0 to HW filter on device bond251 [ 453.601581] IPv6: ADDRCONF(NETDEV_CHANGE): bond251: link becomes ready [ 453.622853] device bridge225 entered promiscuous mode [ 453.623344] bond251: Enslaving bridge225 as a backup interface with a down link [ 453.750992] device bond252 entered promiscuous mode [ 453.751268] IPv6: ADDRCONF(NETDEV_UP): bond252: link is not ready [ 453.751277] 8021q: adding VLAN 0 to HW filter on device bond252 17:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d1dc185c10000d0700000000ff034697af877725000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = creat(&(0x7f0000000500)='./file0\x00', 0x20) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1951}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe83}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x26}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x40040) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x10000, 0x0) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:18 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',=\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000180005800c00028008000300a00100000700010069620000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x21c, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffff, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x268, @private1, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f10ae51}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c4c}]}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4040005}, 0x48880) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000380)=""/250) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:18 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 454.199494] bond253: Enslaving bridge226 as a backup interface with an up link [ 454.200012] device bond253 entered promiscuous mode [ 454.200019] device bridge226 entered promiscuous mode [ 454.200391] IPv6: ADDRCONF(NETDEV_UP): bond253: link is not ready [ 454.200399] 8021q: adding VLAN 0 to HW filter on device bond253 [ 454.201593] net_ratelimit: 8 callbacks suppressed [ 454.201597] bond253: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 454.246035] IPv6: ADDRCONF(NETDEV_CHANGE): bond253: link becomes ready [ 454.352190] bond253: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES64=r3, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYRES64=r4], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r9, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r9, 0x3}, &(0x7f0000000300)=0x8) 17:03:19 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 454.570255] device bond255 entered promiscuous mode [ 454.570627] IPv6: ADDRCONF(NETDEV_UP): bond255: link is not ready [ 454.570635] 8021q: adding VLAN 0 to HW filter on device bond255 17:03:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c000200080001000498df961a78c0714a7d251ce66bbeedda4e88754381c98fc84e642be25601fbab8ba5061f5f0ec5642eb004628b70a083def89b69fdcfd6c8e5e693cc497823232b2ac422d5f7af4468fae6ff1fbb337c4df2e951ec01504a85f193706ae7afc46aaf07341ea09fc3ef821e81010c6b6af98cb876b7c2148b27e7f7282990deef75753cfd29008bf9c30616a6fb8ddfc7c7d083a0465ea31d5f8d4912e457341337"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0xfffffffc, @fd, 0x80000001}, 0xff00}) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000440)) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) fcntl$dupfd(r5, 0x406, r6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:19 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 454.824008] bond257: Enslaving bridge228 as a backup interface with an up link [ 454.824625] device bond257 entered promiscuous mode [ 454.824631] device bridge228 entered promiscuous mode [ 454.824981] IPv6: ADDRCONF(NETDEV_UP): bond257: link is not ready [ 454.824989] 8021q: adding VLAN 0 to HW filter on device bond257 [ 454.826432] bond257: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.827423] IPv6: ADDRCONF(NETDEV_CHANGE): bond257: link becomes ready 17:03:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000000c0)={0x9, 0x0, 0x3016, 0x80000001, 0x101, 0xffffffff, 0x5, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 454.849612] device bridge229 entered promiscuous mode [ 454.888108] bond257: Enslaving bridge229 as a backup interface with a down link [ 454.931811] bond257: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:19 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 455.057128] bond258: Enslaving bridge230 as a backup interface with an up link [ 455.057295] bond258: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 455.057661] device bond258 entered promiscuous mode [ 455.109945] device bridge230 entered promiscuous mode [ 455.111661] 8021q: adding VLAN 0 to HW filter on device bond258 [ 455.135643] device bridge231 entered promiscuous mode [ 455.150423] bond258: Enslaving bridge231 as a backup interface with a down link 17:03:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c03000010000df5fffffffffef794544f4e2603", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="71e483ce0ec0a27eb64ad3ac8f2a2d44caebbf45c4d7ec821859a2c5b9879195", @ANYRESDEC, @ANYBLOB="140012000b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x24008804}, 0x1) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 455.163950] bond258: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:20 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x18, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x10000, 0x492640) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES32=r7, @ANYBLOB="1c0012000c00010062f6797610d36f6e64000c00020008000100040000004aba9b0b848c105326778acf25c6193a66e7b73be0efd732a3fd33ff9ac06c6c0e936de8e570055e7841fc2aa9266707b2"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r7, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}}, 0x20}}, 0x84810) 17:03:20 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:20 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$sock_proto_private(r5, 0x89ec, &(0x7f0000000400)="3d2d2a06e4bfc05a731e953259af509bd811c2f2a03cb52474be2fbfdf8ca3a745434cecc41ae6ace3c3049c8de4fdaa92431d9dfc8252cbe584634d7918560eab1027d3e07e5047c9f9b097352792f48c32bcb3ae7eacf373a1ff1f474921e2983852846a11ff3ff8459e92f43b95a2387f3cd90cb70d2a3116fecebbb5bb3901016b40102b96794a7d8f082bc7fcb4d16df59b1566d59adffdfdf30b4c63fda09a") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r10 = socket$packet(0x11, 0x2, 0x300) dup2(r10, r9) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x804) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:20 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 455.818346] bond259: Enslaving bridge234 as a backup interface with an up link [ 455.839689] device bond259 entered promiscuous mode [ 455.839696] device bridge234 entered promiscuous mode [ 455.840077] IPv6: ADDRCONF(NETDEV_UP): bond259: link is not ready [ 455.840085] 8021q: adding VLAN 0 to HW filter on device bond259 [ 455.840807] bond259: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 455.841031] IPv6: ADDRCONF(NETDEV_CHANGE): bond259: link becomes ready 17:03:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 455.943769] bond259: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f00000000c0)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r5, @ANYBLOB="140012000b000100627269646765f91580cca2228d3add82cc84c2a5d66fe98bf91b739f9fd9c93986cd28993abce189128076e713ca08ff3ec67d3c9d01b5d58b7e66786b83c28350b8b07278b3527e300b1f3ad53f1c108107a73001595e257bf344f141a4e3bdb6297143bcda158c32b0e10a4180f74037da4a47a1a521c24e322dd297109dfcdbb7b4c641fc56c118c9af1fb73e836cef1c3c1994240ab5382c81827987945fa4bd74d08bcec3"], 0x3c}}, 0x0) r6 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) [ 456.200294] device bond261 entered promiscuous mode [ 456.200536] IPv6: ADDRCONF(NETDEV_UP): bond261: link is not ready [ 456.223783] 8021q: adding VLAN 0 to HW filter on device bond261 17:03:21 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000240)={0x7, 0x2}, 0x0, 0x0, &(0x7f0000000300)={0x4, 0xa, 0x8, 0x10001}, &(0x7f0000000380)=0x80000001, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:21 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 456.453309] bond262: Enslaving bridge236 as a backup interface with an up link [ 456.462353] bond262: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 456.463129] device bond262 entered promiscuous mode [ 456.463135] device bridge236 entered promiscuous mode [ 456.464429] 8021q: adding VLAN 0 to HW filter on device bond262 17:03:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x4, 0x75, 0x8, 0x6, 0x61a, 0x96e9, 0x9}, 0x1c) r4 = socket(0x10, 0x2, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r7 = dup3(r5, r6, 0x80000) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x28, 0x13, 0xa, 0x301, 0x0, 0x0, {0x783b2f10e0a1ad6c, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 456.572552] bond262: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:21 executing program 3: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 456.720815] bond264: Enslaving bridge238 as a backup interface with an up link [ 456.743722] bond264: Enslaving bridge239 as a backup interface with a down link 17:03:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:21 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 456.984237] bond265: Enslaving bridge240 as a backup interface with an up link [ 456.985067] device bond265 entered promiscuous mode [ 456.985073] device bridge240 entered promiscuous mode [ 456.985937] 8021q: adding VLAN 0 to HW filter on device bond265 [ 457.005459] device bridge241 entered promiscuous mode [ 457.026388] bond265: Enslaving bridge241 as a backup interface with a down link 17:03:22 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 457.149593] bond266: Enslaving bridge242 as a backup interface with an up link [ 457.156963] device bond266 entered promiscuous mode [ 457.156970] device bridge242 entered promiscuous mode [ 457.157307] IPv6: ADDRCONF(NETDEV_UP): bond266: link is not ready [ 457.157315] 8021q: adding VLAN 0 to HW filter on device bond266 [ 457.158020] IPv6: ADDRCONF(NETDEV_CHANGE): bond266: link becomes ready 17:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8010) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xd8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffeffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @remote}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @multicast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, "494bc8b6e8fd00d06390f983265e94ae424adb126124298ba458d2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @remote}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x200}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x9, 0x0, [0x1b, 0x18, 0x6, 0x11, 0x5]}, {0x7, 0x0, [0x19, 0x13, 0x19]}, {0x7, 0x0, [0x1f, 0x6, 0xb]}, {0xa, 0x0, [0x1a, 0x16, 0x13, 0xd, 0x12, 0xa]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000a910002508000000000000000000001896aaea922c6bf0d00e96e37099d0c000b1ba184f907d866218996054cff60b00b813b2308e94e9ba9b3ab0799c396cf5d9c738d4805a09e96da8196fb44455a79e0ba9400ee6645d4646b26e8ebe3a7cfec8bc649b3eaccab8dc6bac2e3068d94a2bf4d79b4d7176aee66d6e3ce05bcaed5476a86370b0116e16c28fb15ab85fe6cb6469ff68a1e970239c5239a0608342ee5cb51bdde59e2a038371297bf000ace6d73a5124846c1f7ae4a08e554eee5b1e56e0eca274c47ed9715bdf92", @ANYRES32=r8, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) 17:03:22 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 457.399331] device bond267 entered promiscuous mode [ 457.399576] IPv6: ADDRCONF(NETDEV_UP): bond267: link is not ready [ 457.399585] 8021q: adding VLAN 0 to HW filter on device bond267 [ 457.400134] nla_parse: 25 callbacks suppressed [ 457.400141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.524191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000ed0000000ed1adae0c000100626f6e64000000000c00020008000100044c921d9c6cd033"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="00004fa20000000c0000000000000000", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2c, 0x25dfdbff, {0x2, 0x10, 0x10, 0x4d, 0x9, 0x0, 0x0, 0x2, 0x8}, ["", "", ""]}, 0x1c}}, 0x40) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0x40, 0x28, 0x3}, 0x10) 17:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000440)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x74, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x520}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000010) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 457.605331] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.605512] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.630985] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.631110] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:22 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 457.803669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.813695] bond269: Enslaving bridge244 as a backup interface with an up link [ 457.814181] device bond269 entered promiscuous mode [ 457.814187] device bridge244 entered promiscuous mode [ 457.814532] IPv6: ADDRCONF(NETDEV_UP): bond269: link is not ready [ 457.814539] 8021q: adding VLAN 0 to HW filter on device bond269 [ 457.817355] IPv6: ADDRCONF(NETDEV_CHANGE): bond269: link becomes ready 17:03:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 457.874921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.892237] device bridge245 entered promiscuous mode [ 457.892707] bond269: Enslaving bridge245 as a backup interface with a down link 17:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 458.077256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:23 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 458.129380] bond270: Enslaving bridge246 as a backup interface with an up link [ 458.129897] device bond270 entered promiscuous mode [ 458.129903] device bridge246 entered promiscuous mode [ 458.130236] IPv6: ADDRCONF(NETDEV_UP): bond270: link is not ready [ 458.130243] 8021q: adding VLAN 0 to HW filter on device bond270 [ 458.134269] IPv6: ADDRCONF(NETDEV_CHANGE): bond270: link becomes ready 17:03:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00', &(0x7f0000000380)=""/105, 0x69) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 458.263078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:23 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0), 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 458.465856] bond272: Enslaving bridge248 as a backup interface with an up link [ 458.469236] device bond272 entered promiscuous mode [ 458.469241] device bridge248 entered promiscuous mode [ 458.469959] 8021q: adding VLAN 0 to HW filter on device bond272 [ 458.500899] device bridge249 entered promiscuous mode [ 458.501369] bond272: Enslaving bridge249 as a backup interface with a down link [ 458.588172] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13375 comm=syz-executor.2 17:03:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 458.782010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13375 comm=syz-executor.2 17:03:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:23 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 459.053109] bond273: Enslaving bridge250 as a backup interface with an up link [ 459.058511] device bond273 entered promiscuous mode [ 459.072868] device bridge250 entered promiscuous mode [ 459.073222] IPv6: ADDRCONF(NETDEV_UP): bond273: link is not ready [ 459.073230] 8021q: adding VLAN 0 to HW filter on device bond273 [ 459.085620] device bridge251 entered promiscuous mode 17:03:24 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 459.108448] bond273: Enslaving bridge251 as a backup interface with a down link [ 459.108561] IPv6: ADDRCONF(NETDEV_CHANGE): bond273: link becomes ready 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:24 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:24 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:24 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:24 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:25 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:26 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:26 executing program 0: socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:26 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:26 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:26 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:26 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:26 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:27 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:27 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:27 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:27 executing program 5: socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:27 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:27 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:27 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:28 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:28 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:28 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:29 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:29 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:29 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:29 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:29 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:29 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:29 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:29 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:30 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:30 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) 17:03:30 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:31 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:31 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:31 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:31 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) 17:03:31 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:31 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:32 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:32 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:32 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:32 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:32 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:32 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:32 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:32 executing program 5: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:32 executing program 5: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:32 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:32 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:33 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:33 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:33 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:33 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:33 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:33 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:34 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:34 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:34 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:34 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:34 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:03:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:35 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:35 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:35 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:35 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:35 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:36 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:36 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:37 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 17:03:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:38 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 17:03:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:38 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:38 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:38 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 17:03:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:38 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 17:03:38 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:39 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:39 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:40 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:40 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:40 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:40 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:40 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:40 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:40 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:40 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES64=r3, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYRES64=r4], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r9, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r9, 0x3}, &(0x7f0000000300)=0x8) 17:03:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES64=r3, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYRES64=r4], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r9, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r9, 0x3}, &(0x7f0000000300)=0x8) 17:03:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) [ 476.488293] nla_parse: 6 callbacks suppressed [ 476.488300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.488482] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 476.489046] device bond10 entered promiscuous mode [ 476.489345] IPv6: ADDRCONF(NETDEV_UP): bond10: link is not ready [ 476.489355] 8021q: adding VLAN 0 to HW filter on device bond10 [ 476.497028] device bond11 entered promiscuous mode 17:03:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 476.564235] IPv6: ADDRCONF(NETDEV_UP): bond11: link is not ready [ 476.564249] 8021q: adding VLAN 0 to HW filter on device bond11 17:03:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES64=r3, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYRES64=r4], 0x3c}}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r9, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r9, 0x3}, &(0x7f0000000300)=0x8) 17:03:41 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:41 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 477.229069] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 477.230351] device bond12 entered promiscuous mode [ 477.248325] IPv6: ADDRCONF(NETDEV_UP): bond12: link is not ready [ 477.248336] 8021q: adding VLAN 0 to HW filter on device bond12 17:03:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:42 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:42 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d07000083740000ff0300000000", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 478.129854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 478.154075] bond10: Enslaving bridge13 as a backup interface with an up link [ 478.179870] device bond10 entered promiscuous mode [ 478.181881] net_ratelimit: 12 callbacks suppressed 17:03:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 478.181885] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 478.187953] device bridge13 entered promiscuous mode [ 478.212182] IPv6: ADDRCONF(NETDEV_UP): bond10: link is not ready [ 478.218647] 8021q: adding VLAN 0 to HW filter on device bond10 17:03:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 478.253180] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready 17:03:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="40fa6bf2ff8d0f2608000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000e31000002100"/20, @ANYRES32=r5, @ANYBLOB="4be702de00000000"], 0x20}}, 0x0) 17:03:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 478.340651] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:43 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 478.567353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 478.584258] bond11: Enslaving bridge14 as a backup interface with an up link 17:03:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:43 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, @l2={0x1f, 0xfff, @fixed={[], 0x12}}, @can={0x1d, r5}, @l2={0x1f, 0xffff, @fixed={[], 0x11}, 0xff, 0x1}, 0x6, 0x0, 0x0, 0x0, 0xe05a, &(0x7f00000000c0)='veth0_macvtap\x00', 0x8, 0x4, 0x3}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x44) [ 479.058659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.066312] bond11: Enslaving bridge12 as a backup interface with an up link 17:03:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004105) 17:03:44 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:44 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:44 executing program 4: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004105) 17:03:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:45 executing program 5: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 17:03:45 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b0dfff3000000f3ffffff000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, 0xffffffffffffffff) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000300)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 480.586568] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:45 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 480.638210] device bond274 entered promiscuous mode [ 480.638476] IPv6: ADDRCONF(NETDEV_UP): bond274: link is not ready [ 480.638485] 8021q: adding VLAN 0 to HW filter on device bond274 17:03:45 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b0dfff3000000f3ffffff000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, 0xffffffffffffffff) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000300)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 481.083098] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.104737] device bond8 entered promiscuous mode [ 481.104983] IPv6: ADDRCONF(NETDEV_UP): bond8: link is not ready [ 481.104992] 8021q: adding VLAN 0 to HW filter on device bond8 17:03:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:46 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000030000000000", @ANYRES16=r3, @ANYRES64=r4], 0x160}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r5 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r8 = socket$packet(0x11, 0x2, 0x300) dup2(r8, r7) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {}, 0x0, 0xa, @fd, 0x0, 0x0, r7}) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x9, 0x2, 0x4, 0x300, 0xffffffff, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc053df4"}, 0x0, 0x1, @fd, 0xff00}) readv(r9, &(0x7f0000000100)=[{&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/171, 0xab}], 0x4) 17:03:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:46 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:46 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:46 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20008054}, 0x4004880) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000000c0)=0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:47 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 482.321215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:03:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x22b, 0x10000}], 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'rose0\x00', 0x81}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0xa, 0x0, 0x0, 0x0, 0x8, 0x1, "1c9d5a42"}, 0x0, 0x1, @userptr=0x3}) [ 482.342795] bond12: Enslaving bridge15 as a backup interface with an up link [ 482.343299] device bond12 entered promiscuous mode [ 482.343306] device bridge15 entered promiscuous mode [ 482.343623] IPv6: ADDRCONF(NETDEV_UP): bond12: link is not ready [ 482.343632] 8021q: adding VLAN 0 to HW filter on device bond12 [ 482.351775] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r6) r7 = getegid() r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r9, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1, r6}], {}, [{0x8, 0x0, r7}, {0x8, 0x4}, {0x8, 0x1, r9}], {}, {0x20, 0x2}}, 0x4c, 0x1) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x6f, 0x2, &(0x7f0000000300)=[{&(0x7f0000000380)="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", 0xfa, 0x200}, {&(0x7f0000000480)="18c4d6165e5d1d6f14246634967e6914f8bb0f194411fea2bca9d0d82fa838dfa7440a646aa2752a256d571f6499f16ce28626bf14e9ed936d8a7c9a9cbec1ca2b1b25ecacb4ea67eb03cfa92c2b6c15c6411d1fcaf625ed243d0e53531fb1aeab8c8c6dd815ad84dcc7a879e3c047b61687756640f69d96d04e001a66845bf5765ff6a32fb08ccbb9288ffa073db0be6784afa91f7275c105072ef075ad9baeb520018ace0294171cad46da1b139fc80c4b88e15ec8450a461198c1907a1040f70d04c9cce9f419e8346c61630d208c08f2", 0xd2, 0x5}], 0x1004000, &(0x7f0000000600)={[{@creator={'creator', 0x3d, "84e333ca"}}, {@codepage={'codepage', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@umask={'umask', 0x3d, 0x7ff}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}], [{@smackfshat={'smackfshat', 0x3d, ',:'}}, {@fsname={'fsname', 0x3d, '!:]--'}}, {@euid_gt={'euid>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xedabe183de02e74b}}, 0x20}}, 0x0) [ 482.352172] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 482.459651] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 482.593381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 482.618600] bond13: Enslaving bridge16 as a backup interface with an up link [ 482.619469] device bond13 entered promiscuous mode [ 482.636626] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 482.636714] device bridge16 entered promiscuous mode [ 482.637132] IPv6: ADDRCONF(NETDEV_UP): bond13: link is not ready [ 482.637143] 8021q: adding VLAN 0 to HW filter on device bond13 [ 482.637819] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready 17:03:47 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 482.739501] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond 17:03:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:48 executing program 5: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:48 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:48 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x80}], 0x1, &(0x7f0000000040)={r1, r2+10000000}, &(0x7f0000000080)={[0xdbb]}, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 17:03:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010010000000000000003000000800010", @ANYRES64=0x0, @ANYRES16=r5], 0x3c}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000380)={0x0, [0xffff, 0x4, 0x300000], [{0x7, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x1, 0x1, 0x0, 0x1, 0x1}, {0xfffffffd, 0x5}, {0x400, 0x5, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x8}, {0x2, 0x7, 0x0, 0x0, 0x1}, {0x4ef, 0x7, 0x0, 0x1, 0x1}, {0x4, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x800, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x1, 0x1}], 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000e08000a00", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xedabe183de02e74b}}, 0x20}}, 0x0) 17:03:49 executing program 1 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 484.409589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=14862 comm=syz-executor.2 [ 484.438320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:03:49 executing program 1 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 484.485514] FAULT_INJECTION: forcing a failure. [ 484.485514] name failslab, interval 1, probability 0, space 0, times 0 [ 484.485529] CPU: 0 PID: 14868 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 484.485538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.485544] Call Trace: [ 484.485563] dump_stack+0x1b2/0x283 [ 484.485587] should_fail.cold+0x10a/0x154 [ 484.485611] should_failslab+0xd6/0x130 [ 484.485628] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 484.485654] alloc_pipe_info+0xaa/0x380 [ 484.485796] splice_direct_to_actor+0x581/0x730 [ 484.485836] ? avc_policy_seqno+0x5/0x10 [ 484.485848] ? generic_pipe_buf_nosteal+0x10/0x10 [ 484.485869] ? do_splice_to+0x150/0x150 [ 484.485886] ? rw_verify_area+0xe1/0x290 [ 484.485904] do_splice_direct+0x164/0x210 [ 484.485922] ? splice_direct_to_actor+0x730/0x730 [ 484.485947] ? rw_verify_area+0xe1/0x290 17:03:49 executing program 0 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 484.485965] do_sendfile+0x469/0xaf0 [ 484.485993] ? do_compat_pwritev64+0x140/0x140 [ 484.486023] SyS_sendfile64+0xff/0x110 [ 484.486037] ? SyS_sendfile+0x130/0x130 [ 484.486052] ? do_syscall_64+0x4c/0x640 [ 484.486065] ? SyS_sendfile+0x130/0x130 [ 484.486082] do_syscall_64+0x1d5/0x640 [ 484.486120] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 484.486131] RIP: 0033:0x45cba9 [ 484.486139] RSP: 002b:00007faf29664c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 484.486154] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 484.486161] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 484.486169] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 484.486176] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 484.486184] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007faf296656d4 [ 484.516744] FAULT_INJECTION: forcing a failure. [ 484.516744] name failslab, interval 1, probability 0, space 0, times 0 [ 484.516758] CPU: 0 PID: 14871 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 484.516765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.516771] Call Trace: [ 484.516789] dump_stack+0x1b2/0x283 [ 484.516811] should_fail.cold+0x10a/0x154 [ 484.627596] FAULT_INJECTION: forcing a failure. [ 484.627596] name failslab, interval 1, probability 0, space 0, times 0 [ 484.628528] should_failslab+0xd6/0x130 [ 484.628545] __kmalloc+0x2c1/0x400 [ 484.722214] ? alloc_pipe_info+0x156/0x380 [ 484.722239] alloc_pipe_info+0x156/0x380 17:03:49 executing program 0 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 484.730553] splice_direct_to_actor+0x581/0x730 [ 484.730576] ? avc_policy_seqno+0x5/0x10 [ 484.730587] ? generic_pipe_buf_nosteal+0x10/0x10 [ 484.730608] ? do_splice_to+0x150/0x150 17:03:49 executing program 1 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 484.730632] ? rw_verify_area+0xe1/0x290 [ 484.730655] do_splice_direct+0x164/0x210 [ 484.730673] ? splice_direct_to_actor+0x730/0x730 [ 484.730702] ? rw_verify_area+0xe1/0x290 [ 484.730721] do_sendfile+0x469/0xaf0 [ 484.730750] ? do_compat_pwritev64+0x140/0x140 [ 484.730793] SyS_sendfile64+0xff/0x110 [ 484.730807] ? SyS_sendfile+0x130/0x130 [ 484.730822] ? do_syscall_64+0x4c/0x640 [ 484.730839] ? SyS_sendfile+0x130/0x130 [ 484.730855] do_syscall_64+0x1d5/0x640 [ 484.730883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 484.730898] RIP: 0033:0x45cba9 [ 484.730909] RSP: 002b:00007faf29664c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 484.730923] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 484.730940] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 484.730948] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 484.730956] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 484.730964] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007faf296656d4 [ 484.743472] CPU: 1 PID: 14875 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 484.743480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.743484] Call Trace: [ 484.743499] dump_stack+0x1b2/0x283 [ 484.743516] should_fail.cold+0x10a/0x154 [ 484.743534] should_failslab+0xd6/0x130 [ 484.743545] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 484.743559] alloc_pipe_info+0xaa/0x380 [ 484.743574] splice_direct_to_actor+0x581/0x730 [ 484.743586] ? avc_policy_seqno+0x5/0x10 [ 484.743596] ? generic_pipe_buf_nosteal+0x10/0x10 [ 484.743610] ? do_splice_to+0x150/0x150 [ 484.743621] ? rw_verify_area+0xe1/0x290 [ 484.743634] do_splice_direct+0x164/0x210 [ 484.743647] ? splice_direct_to_actor+0x730/0x730 [ 484.743663] ? rw_verify_area+0xe1/0x290 [ 484.743682] do_sendfile+0x469/0xaf0 [ 484.743699] ? do_compat_pwritev64+0x140/0x140 [ 484.743718] SyS_sendfile64+0xff/0x110 [ 484.743729] ? SyS_sendfile+0x130/0x130 [ 484.743740] ? do_syscall_64+0x4c/0x640 [ 484.743750] ? SyS_sendfile+0x130/0x130 [ 484.743762] do_syscall_64+0x1d5/0x640 [ 484.743779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 484.743787] RIP: 0033:0x45cba9 [ 484.743793] RSP: 002b:00007f7fe8adcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 484.743805] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 484.743811] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 484.743817] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 484.743824] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 484.743830] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007f7fe8add6d4 [ 484.802208] FAULT_INJECTION: forcing a failure. [ 484.802208] name failslab, interval 1, probability 0, space 0, times 0 [ 484.842433] FAULT_INJECTION: forcing a failure. [ 484.842433] name failslab, interval 1, probability 0, space 0, times 0 [ 484.844288] CPU: 1 PID: 14877 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 485.081488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.081492] Call Trace: [ 485.081511] dump_stack+0x1b2/0x283 [ 485.081527] should_fail.cold+0x10a/0x154 17:03:50 executing program 0 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:50 executing program 2 (fault-call:5 fault-nth:0): socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 485.101181] should_failslab+0xd6/0x130 17:03:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 485.101192] __kmalloc+0x2c1/0x400 [ 485.101202] ? alloc_pipe_info+0x156/0x380 [ 485.101215] alloc_pipe_info+0x156/0x380 [ 485.101231] splice_direct_to_actor+0x581/0x730 [ 485.101245] ? avc_policy_seqno+0x5/0x10 [ 485.101254] ? generic_pipe_buf_nosteal+0x10/0x10 [ 485.101268] ? do_splice_to+0x150/0x150 [ 485.101280] ? rw_verify_area+0xe1/0x290 [ 485.101293] do_splice_direct+0x164/0x210 [ 485.101306] ? splice_direct_to_actor+0x730/0x730 [ 485.101323] ? rw_verify_area+0xe1/0x290 [ 485.101335] do_sendfile+0x469/0xaf0 [ 485.101355] ? do_compat_pwritev64+0x140/0x140 [ 485.101373] SyS_sendfile64+0xff/0x110 [ 485.101384] ? SyS_sendfile+0x130/0x130 [ 485.101396] ? do_syscall_64+0x4c/0x640 [ 485.101407] ? SyS_sendfile+0x130/0x130 [ 485.101418] do_syscall_64+0x1d5/0x640 [ 485.101437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 485.101446] RIP: 0033:0x45cba9 [ 485.101452] RSP: 002b:00007f7fe8adcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 485.101464] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 485.101470] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 485.101476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 485.101482] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 485.101488] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007f7fe8add6d4 [ 485.129973] CPU: 0 PID: 14879 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 485.129983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.129989] Call Trace: [ 485.130009] dump_stack+0x1b2/0x283 [ 485.130033] should_fail.cold+0x10a/0x154 [ 485.130056] should_failslab+0xd6/0x130 [ 485.130073] kmem_cache_alloc_node_trace+0x25a/0x400 [ 485.130095] __kmalloc_node+0x38/0x70 [ 485.130113] kvmalloc_node+0x46/0xd0 [ 485.130131] iov_iter_get_pages_alloc+0x48c/0xe40 [ 485.130244] ? is_bpf_text_address+0xa3/0x120 [ 485.130260] ? iov_iter_get_pages+0xc70/0xc70 [ 485.130273] ? __kernel_text_address+0x9/0x30 [ 485.130287] ? unwind_get_return_address+0x51/0x90 [ 485.130297] ? iov_iter_pipe+0x93/0x2b0 [ 485.130318] default_file_splice_read+0x17c/0x870 [ 485.130331] ? depot_save_stack+0x10d/0x401 [ 485.130361] ? do_splice_direct+0x210/0x210 [ 485.130373] ? alloc_pipe_info+0x156/0x380 [ 485.130384] ? splice_direct_to_actor+0x581/0x730 [ 485.130395] ? do_splice_direct+0x164/0x210 [ 485.130405] ? do_sendfile+0x469/0xaf0 [ 485.130416] ? SyS_sendfile64+0xff/0x110 [ 485.130428] ? do_syscall_64+0x1d5/0x640 [ 485.130440] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 485.130470] ? fsnotify+0x897/0x1110 [ 485.130483] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 485.130509] ? __fsnotify_inode_delete+0x20/0x20 [ 485.130527] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 485.130548] ? __inode_security_revalidate+0xcf/0x120 [ 485.130563] ? avc_policy_seqno+0x5/0x10 [ 485.130574] ? selinux_file_permission+0x7a/0x440 [ 485.130594] ? security_file_permission+0x82/0x1e0 [ 485.130611] ? rw_verify_area+0xe1/0x290 [ 485.130623] ? do_splice_direct+0x210/0x210 [ 485.130640] do_splice_to+0xfb/0x150 [ 485.130650] ? alloc_pipe_info+0x294/0x380 [ 485.130670] splice_direct_to_actor+0x20a/0x730 [ 485.130689] ? generic_pipe_buf_nosteal+0x10/0x10 [ 485.130710] ? do_splice_to+0x150/0x150 [ 485.130724] ? rw_verify_area+0xe1/0x290 [ 485.130744] do_splice_direct+0x164/0x210 [ 485.130761] ? splice_direct_to_actor+0x730/0x730 [ 485.130787] ? rw_verify_area+0xe1/0x290 [ 485.130805] do_sendfile+0x469/0xaf0 [ 485.130834] ? do_compat_pwritev64+0x140/0x140 [ 485.130865] SyS_sendfile64+0xff/0x110 [ 485.130879] ? SyS_sendfile+0x130/0x130 [ 485.130897] ? do_syscall_64+0x4c/0x640 [ 485.130911] ? SyS_sendfile+0x130/0x130 [ 485.130929] do_syscall_64+0x1d5/0x640 [ 485.130954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 485.130965] RIP: 0033:0x45cba9 [ 485.130973] RSP: 002b:00007faf29664c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 485.130988] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 485.130996] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 485.131004] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 485.131011] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 485.131019] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007faf296656d4 [ 485.208262] FAULT_INJECTION: forcing a failure. [ 485.208262] name failslab, interval 1, probability 0, space 0, times 0 [ 485.208275] CPU: 0 PID: 14882 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 485.208287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.208294] Call Trace: [ 485.208312] dump_stack+0x1b2/0x283 [ 485.208335] should_fail.cold+0x10a/0x154 [ 485.208359] should_failslab+0xd6/0x130 [ 485.208375] kmem_cache_alloc_node_trace+0x25a/0x400 [ 485.208396] __kmalloc_node+0x38/0x70 [ 485.208414] kvmalloc_node+0x46/0xd0 [ 485.208428] iov_iter_get_pages_alloc+0x48c/0xe40 [ 485.208449] ? is_bpf_text_address+0xa3/0x120 [ 485.208461] ? iov_iter_get_pages+0xc70/0xc70 [ 485.208472] ? __kernel_text_address+0x9/0x30 [ 485.208484] ? unwind_get_return_address+0x51/0x90 [ 485.208493] ? iov_iter_pipe+0x93/0x2b0 [ 485.208511] default_file_splice_read+0x17c/0x870 [ 485.208522] ? depot_save_stack+0x10d/0x401 [ 485.208550] ? do_splice_direct+0x210/0x210 [ 485.208560] ? alloc_pipe_info+0x156/0x380 [ 485.208570] ? splice_direct_to_actor+0x581/0x730 [ 485.208580] ? do_splice_direct+0x164/0x210 [ 485.208590] ? do_sendfile+0x469/0xaf0 [ 485.208600] ? SyS_sendfile64+0xff/0x110 [ 485.208610] ? do_syscall_64+0x1d5/0x640 [ 485.208621] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 485.208647] ? fsnotify+0x897/0x1110 [ 485.208658] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 485.208682] ? __fsnotify_inode_delete+0x20/0x20 [ 485.208697] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 485.208717] ? __inode_security_revalidate+0xcf/0x120 [ 485.208730] ? avc_policy_seqno+0x5/0x10 [ 485.208741] ? selinux_file_permission+0x7a/0x440 [ 485.208760] ? security_file_permission+0x82/0x1e0 [ 485.208776] ? rw_verify_area+0xe1/0x290 [ 485.208787] ? do_splice_direct+0x210/0x210 [ 485.208803] do_splice_to+0xfb/0x150 [ 485.208813] ? alloc_pipe_info+0x294/0x380 [ 485.208832] splice_direct_to_actor+0x20a/0x730 [ 485.208851] ? generic_pipe_buf_nosteal+0x10/0x10 [ 485.208870] ? do_splice_to+0x150/0x150 [ 485.208885] ? rw_verify_area+0xe1/0x290 [ 485.208903] do_splice_direct+0x164/0x210 [ 485.208919] ? splice_direct_to_actor+0x730/0x730 [ 485.208944] ? rw_verify_area+0xe1/0x290 [ 485.208961] do_sendfile+0x469/0xaf0 [ 485.208988] ? do_compat_pwritev64+0x140/0x140 [ 485.209017] SyS_sendfile64+0xff/0x110 [ 485.209030] ? SyS_sendfile+0x130/0x130 [ 485.209043] ? do_syscall_64+0x4c/0x640 [ 485.209055] ? SyS_sendfile+0x130/0x130 [ 485.209071] do_syscall_64+0x1d5/0x640 [ 485.209096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 485.209107] RIP: 0033:0x45cba9 [ 485.209114] RSP: 002b:00007f7fe8adcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 485.209129] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 485.209144] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 485.209152] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 485.209160] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 485.209168] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007f7fe8add6d4 [ 485.212417] FAULT_INJECTION: forcing a failure. [ 485.212417] name failslab, interval 1, probability 0, space 0, times 0 [ 485.212430] CPU: 0 PID: 14883 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 485.212438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.212443] Call Trace: [ 485.212460] dump_stack+0x1b2/0x283 [ 485.212484] should_fail.cold+0x10a/0x154 [ 485.212505] should_failslab+0xd6/0x130 [ 485.212520] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 485.212541] alloc_pipe_info+0xaa/0x380 [ 485.212561] splice_direct_to_actor+0x581/0x730 [ 485.212580] ? avc_policy_seqno+0x5/0x10 [ 485.212591] ? generic_pipe_buf_nosteal+0x10/0x10 [ 485.212612] ? do_splice_to+0x150/0x150 [ 485.212628] ? rw_verify_area+0xe1/0x290 [ 485.212644] do_splice_direct+0x164/0x210 [ 485.212661] ? splice_direct_to_actor+0x730/0x730 [ 485.212688] ? rw_verify_area+0xe1/0x290 [ 485.212705] do_sendfile+0x469/0xaf0 [ 485.212731] ? do_compat_pwritev64+0x140/0x140 [ 485.212762] SyS_sendfile64+0xff/0x110 [ 485.212777] ? SyS_sendfile+0x130/0x130 [ 485.212792] ? do_syscall_64+0x4c/0x640 [ 485.212805] ? SyS_sendfile+0x130/0x130 [ 485.212822] do_syscall_64+0x1d5/0x640 [ 485.212848] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 485.212858] RIP: 0033:0x45cba9 [ 485.212866] RSP: 002b:00007fb9df2b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 485.212881] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 485.212889] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 485.212896] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 485.212904] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000007 [ 485.212918] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007fb9df2b96d4 17:03:51 executing program 4 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:51 executing program 5 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:51 executing program 1 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:51 executing program 2 (fault-call:5 fault-nth:1): socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:51 executing program 0 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) [ 486.244059] FAULT_INJECTION: forcing a failure. [ 486.244059] name failslab, interval 1, probability 0, space 0, times 0 [ 486.245175] FAULT_INJECTION: forcing a failure. [ 486.245175] name failslab, interval 1, probability 0, space 0, times 0 [ 486.257337] FAULT_INJECTION: forcing a failure. [ 486.257337] name failslab, interval 1, probability 0, space 0, times 0 [ 486.277073] FAULT_INJECTION: forcing a failure. [ 486.277073] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 486.282777] CPU: 0 PID: 14905 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 486.299322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.308680] Call Trace: [ 486.311277] dump_stack+0x1b2/0x283 [ 486.314915] should_fail.cold+0x10a/0x154 [ 486.319079] should_failslab+0xd6/0x130 [ 486.323066] kmem_cache_alloc+0x28e/0x3c0 [ 486.327210] getname_flags+0xc8/0x550 [ 486.331019] do_sys_open+0x202/0x3e0 [ 486.334732] ? filp_open+0x60/0x60 [ 486.338264] ? SyS_clock_settime+0x1a0/0x1a0 17:03:51 executing program 1 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 486.342674] ? do_syscall_64+0x4c/0x640 [ 486.346912] ? do_sys_open+0x3e0/0x3e0 [ 486.350880] do_syscall_64+0x1d5/0x640 [ 486.354764] entry_SYSCALL_64_after_hwframe+0x46/0xbb 17:03:51 executing program 4 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:51 executing program 4 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 486.359963] RIP: 0033:0x416921 [ 486.359972] RSP: 002b:00007f7332049bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 17:03:51 executing program 2 (fault-call:5 fault-nth:2): socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:51 executing program 0 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:51 executing program 5 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 486.359987] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.359995] RDX: 00007f7332049be4 RSI: 0000000000000002 RDI: 00007f7332049bd0 [ 486.360003] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 17:03:51 executing program 5 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:51 executing program 2 (fault-call:5 fault-nth:3): socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:51 executing program 4 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 486.360011] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.360019] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f733204a6d4 [ 486.363538] FAULT_INJECTION: forcing a failure. 17:03:51 executing program 5 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 486.363538] name fail_page_alloc, interval 1, probability 0, space 0, times 1 17:03:51 executing program 2 (fault-call:5 fault-nth:4): socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 486.363556] CPU: 0 PID: 14904 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 486.363565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.363571] Call Trace: [ 486.363586] dump_stack+0x1b2/0x283 [ 486.363611] should_fail.cold+0x10a/0x154 [ 486.363634] __alloc_pages_nodemask+0x22b/0x2730 [ 486.363652] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.363670] ? kvmalloc_node+0x46/0xd0 [ 486.363684] ? default_file_splice_read+0x17c/0x870 [ 486.363696] ? do_splice_to+0xfb/0x150 [ 486.363707] ? splice_direct_to_actor+0x20a/0x730 [ 486.363718] ? do_splice_direct+0x164/0x210 [ 486.363728] ? do_sendfile+0x469/0xaf0 [ 486.363739] ? SyS_sendfile64+0xff/0x110 [ 486.363750] ? do_syscall_64+0x1d5/0x640 [ 486.363762] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.363778] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.363794] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.363812] ? HARDIRQ_verbose+0x10/0x10 [ 486.363831] ? fs_reclaim_acquire+0x10/0x10 [ 486.363872] alloc_pages_current+0xe7/0x1e0 [ 486.363890] push_pipe+0x3ad/0x720 [ 486.363917] iov_iter_get_pages_alloc+0x4da/0xe40 [ 486.363939] ? is_bpf_text_address+0xa3/0x120 [ 486.363954] ? iov_iter_get_pages+0xc70/0xc70 [ 486.363970] ? unwind_get_return_address+0x51/0x90 [ 486.363979] ? iov_iter_pipe+0x93/0x2b0 [ 486.363999] default_file_splice_read+0x17c/0x870 [ 486.364011] ? depot_save_stack+0x10d/0x401 [ 486.364041] ? do_splice_direct+0x210/0x210 [ 486.364051] ? alloc_pipe_info+0x156/0x380 [ 486.364063] ? splice_direct_to_actor+0x581/0x730 [ 486.364073] ? do_splice_direct+0x164/0x210 [ 486.364083] ? do_sendfile+0x469/0xaf0 [ 486.364094] ? SyS_sendfile64+0xff/0x110 [ 486.364104] ? do_syscall_64+0x1d5/0x640 [ 486.364116] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.364145] ? fsnotify+0x897/0x1110 [ 486.364157] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.364184] ? __fsnotify_inode_delete+0x20/0x20 [ 486.364202] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.364224] ? __inode_security_revalidate+0xcf/0x120 [ 486.364238] ? avc_policy_seqno+0x5/0x10 [ 486.364250] ? selinux_file_permission+0x7a/0x440 [ 486.364271] ? security_file_permission+0x82/0x1e0 [ 486.364287] ? rw_verify_area+0xe1/0x290 [ 486.364300] ? do_splice_direct+0x210/0x210 [ 486.364316] do_splice_to+0xfb/0x150 [ 486.364327] ? alloc_pipe_info+0x294/0x380 [ 486.364346] splice_direct_to_actor+0x20a/0x730 [ 486.364366] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.364386] ? do_splice_to+0x150/0x150 [ 486.364402] ? rw_verify_area+0xe1/0x290 [ 486.364421] do_splice_direct+0x164/0x210 [ 486.364438] ? splice_direct_to_actor+0x730/0x730 [ 486.364465] ? rw_verify_area+0xe1/0x290 [ 486.364483] do_sendfile+0x469/0xaf0 [ 486.364511] ? do_compat_pwritev64+0x140/0x140 [ 486.364549] SyS_sendfile64+0xff/0x110 [ 486.364565] ? SyS_sendfile+0x130/0x130 [ 486.364579] ? do_syscall_64+0x4c/0x640 [ 486.364596] ? SyS_sendfile+0x130/0x130 [ 486.364613] do_syscall_64+0x1d5/0x640 [ 486.364639] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.364649] RIP: 0033:0x45cba9 [ 486.364657] RSP: 002b:00007faf29664c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.364672] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.364680] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 486.364688] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.364696] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 486.364703] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007faf296656d4 [ 486.371363] CPU: 1 PID: 14903 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 486.371370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.371374] Call Trace: [ 486.371388] dump_stack+0x1b2/0x283 [ 486.371403] should_fail.cold+0x10a/0x154 [ 486.371419] __alloc_pages_nodemask+0x22b/0x2730 [ 486.371432] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.371445] ? kvmalloc_node+0x46/0xd0 [ 486.371455] ? default_file_splice_read+0x17c/0x870 [ 486.371464] ? do_splice_to+0xfb/0x150 [ 486.371473] ? splice_direct_to_actor+0x20a/0x730 [ 486.371483] ? do_splice_direct+0x164/0x210 [ 486.371491] ? do_sendfile+0x469/0xaf0 [ 486.371499] ? SyS_sendfile64+0xff/0x110 [ 486.371508] ? do_syscall_64+0x1d5/0x640 [ 486.371517] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.371530] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.371540] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.371553] ? HARDIRQ_verbose+0x10/0x10 [ 486.371566] ? fs_reclaim_acquire+0x10/0x10 [ 486.371591] alloc_pages_current+0xe7/0x1e0 [ 486.371604] push_pipe+0x3ad/0x720 [ 486.371621] iov_iter_get_pages_alloc+0x4da/0xe40 [ 486.371636] ? is_bpf_text_address+0xa3/0x120 [ 486.371646] ? iov_iter_get_pages+0xc70/0xc70 [ 486.371659] ? unwind_get_return_address+0x51/0x90 [ 486.371666] ? iov_iter_pipe+0x93/0x2b0 [ 486.371680] default_file_splice_read+0x17c/0x870 [ 486.371689] ? depot_save_stack+0x10d/0x401 [ 486.371708] ? do_splice_direct+0x210/0x210 [ 486.371716] ? alloc_pipe_info+0x156/0x380 [ 486.371726] ? splice_direct_to_actor+0x581/0x730 [ 486.371735] ? do_splice_direct+0x164/0x210 [ 486.371743] ? do_sendfile+0x469/0xaf0 [ 486.371751] ? SyS_sendfile64+0xff/0x110 [ 486.371760] ? do_syscall_64+0x1d5/0x640 [ 486.371770] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.371788] ? fsnotify+0x897/0x1110 [ 486.371799] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.371808] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.371823] ? __fsnotify_inode_delete+0x20/0x20 [ 486.371836] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.371852] ? __inode_security_revalidate+0xcf/0x120 [ 486.371862] ? avc_policy_seqno+0x5/0x10 [ 486.371872] ? selinux_file_permission+0x7a/0x440 [ 486.371886] ? security_file_permission+0x82/0x1e0 [ 486.371898] ? rw_verify_area+0xe1/0x290 [ 486.371907] ? do_splice_direct+0x210/0x210 [ 486.371924] do_splice_to+0xfb/0x150 [ 486.371934] ? alloc_pipe_info+0x294/0x380 [ 486.371947] splice_direct_to_actor+0x20a/0x730 [ 486.371961] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.371974] ? do_splice_to+0x150/0x150 [ 486.371985] ? rw_verify_area+0xe1/0x290 [ 486.371999] do_splice_direct+0x164/0x210 [ 486.372011] ? splice_direct_to_actor+0x730/0x730 [ 486.372028] ? rw_verify_area+0xe1/0x290 [ 486.372045] do_sendfile+0x469/0xaf0 [ 486.372064] ? do_compat_pwritev64+0x140/0x140 [ 486.372083] SyS_sendfile64+0xff/0x110 [ 486.372093] ? SyS_sendfile+0x130/0x130 [ 486.372103] ? do_syscall_64+0x4c/0x640 [ 486.372113] ? SyS_sendfile+0x130/0x130 [ 486.372125] do_syscall_64+0x1d5/0x640 [ 486.372142] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.372150] RIP: 0033:0x45cba9 [ 486.372156] RSP: 002b:00007f7fe8adcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.372167] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.372174] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 486.372180] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.372186] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 486.372192] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007f7fe8add6d4 [ 486.373387] CPU: 1 PID: 14901 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 486.373394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.373398] Call Trace: [ 486.373411] dump_stack+0x1b2/0x283 [ 486.373427] should_fail.cold+0x10a/0x154 [ 486.373442] should_failslab+0xd6/0x130 [ 486.373452] __kmalloc+0x2c1/0x400 [ 486.373461] ? alloc_pipe_info+0x156/0x380 [ 486.373474] alloc_pipe_info+0x156/0x380 [ 486.373488] splice_direct_to_actor+0x581/0x730 [ 486.373500] ? avc_policy_seqno+0x5/0x10 [ 486.373510] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.373523] ? do_splice_to+0x150/0x150 [ 486.373534] ? rw_verify_area+0xe1/0x290 [ 486.373545] do_splice_direct+0x164/0x210 [ 486.373557] ? splice_direct_to_actor+0x730/0x730 [ 486.373574] ? rw_verify_area+0xe1/0x290 [ 486.373586] do_sendfile+0x469/0xaf0 [ 486.373619] ? do_compat_pwritev64+0x140/0x140 [ 486.373639] SyS_sendfile64+0xff/0x110 [ 486.373650] ? SyS_sendfile+0x130/0x130 [ 486.373660] ? do_syscall_64+0x4c/0x640 [ 486.373669] ? SyS_sendfile+0x130/0x130 [ 486.373681] do_syscall_64+0x1d5/0x640 [ 486.373698] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.373705] RIP: 0033:0x45cba9 [ 486.373711] RSP: 002b:00007fb9df2b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.373721] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.373727] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 486.373733] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.373739] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000007 [ 486.373745] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007fb9df2b96d4 [ 486.377837] CPU: 0 PID: 14906 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 486.377846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.377852] Call Trace: [ 486.377867] dump_stack+0x1b2/0x283 [ 486.377890] should_fail.cold+0x10a/0x154 [ 486.377913] should_failslab+0xd6/0x130 [ 486.377928] kmem_cache_alloc+0x28e/0x3c0 [ 486.377946] getname_flags+0xc8/0x550 [ 486.377965] do_sys_open+0x202/0x3e0 [ 486.377980] ? filp_open+0x60/0x60 [ 486.377997] ? SyS_clock_settime+0x1a0/0x1a0 [ 486.378011] ? do_syscall_64+0x4c/0x640 [ 486.378021] ? do_sys_open+0x3e0/0x3e0 [ 486.378038] do_syscall_64+0x1d5/0x640 [ 486.378061] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.378072] RIP: 0033:0x416921 [ 486.378079] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 486.378093] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.378101] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 486.378108] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 486.378115] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.378123] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 486.414906] FAULT_INJECTION: forcing a failure. [ 486.414906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.414919] CPU: 0 PID: 14911 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 486.414927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.414933] Call Trace: [ 486.414949] dump_stack+0x1b2/0x283 [ 486.414971] should_fail.cold+0x10a/0x154 [ 486.414993] __alloc_pages_nodemask+0x22b/0x2730 [ 486.415010] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.415028] ? kvmalloc_node+0x46/0xd0 [ 486.415041] ? default_file_splice_read+0x17c/0x870 [ 486.415051] ? do_splice_to+0xfb/0x150 [ 486.415061] ? splice_direct_to_actor+0x20a/0x730 [ 486.415072] ? do_splice_direct+0x164/0x210 [ 486.415082] ? do_sendfile+0x469/0xaf0 [ 486.415092] ? SyS_sendfile64+0xff/0x110 [ 486.415103] ? do_syscall_64+0x1d5/0x640 [ 486.415114] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.415130] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.415146] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.415163] ? HARDIRQ_verbose+0x10/0x10 [ 486.415182] ? fs_reclaim_acquire+0x10/0x10 [ 486.415220] alloc_pages_current+0xe7/0x1e0 [ 486.415238] push_pipe+0x3ad/0x720 [ 486.415266] iov_iter_get_pages_alloc+0x4da/0xe40 [ 486.415289] ? is_bpf_text_address+0xa3/0x120 [ 486.415310] ? iov_iter_get_pages+0xc70/0xc70 [ 486.415328] ? unwind_get_return_address+0x51/0x90 [ 486.415338] ? iov_iter_pipe+0x93/0x2b0 [ 486.415360] default_file_splice_read+0x17c/0x870 [ 486.415372] ? depot_save_stack+0x10d/0x401 [ 486.415403] ? do_splice_direct+0x210/0x210 [ 486.415414] ? alloc_pipe_info+0x156/0x380 [ 486.415426] ? splice_direct_to_actor+0x581/0x730 [ 486.415437] ? do_splice_direct+0x164/0x210 [ 486.415448] ? do_sendfile+0x469/0xaf0 [ 486.415460] ? SyS_sendfile64+0xff/0x110 [ 486.415471] ? do_syscall_64+0x1d5/0x640 [ 486.415484] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.415513] ? fsnotify+0x897/0x1110 [ 486.415525] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.415553] ? __fsnotify_inode_delete+0x20/0x20 [ 486.415570] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.415592] ? __inode_security_revalidate+0xcf/0x120 [ 486.415606] ? avc_policy_seqno+0x5/0x10 [ 486.415618] ? selinux_file_permission+0x7a/0x440 [ 486.415638] ? security_file_permission+0x82/0x1e0 [ 486.415656] ? rw_verify_area+0xe1/0x290 [ 486.415668] ? do_splice_direct+0x210/0x210 [ 486.415683] do_splice_to+0xfb/0x150 [ 486.415701] ? alloc_pipe_info+0x294/0x380 [ 486.415722] splice_direct_to_actor+0x20a/0x730 [ 486.415743] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.415763] ? do_splice_to+0x150/0x150 [ 486.415777] ? rw_verify_area+0xe1/0x290 [ 486.415796] do_splice_direct+0x164/0x210 [ 486.415813] ? splice_direct_to_actor+0x730/0x730 [ 486.415839] ? rw_verify_area+0xe1/0x290 [ 486.415857] do_sendfile+0x469/0xaf0 [ 486.415885] ? do_compat_pwritev64+0x140/0x140 [ 486.415913] SyS_sendfile64+0xff/0x110 [ 486.415927] ? SyS_sendfile+0x130/0x130 [ 486.415940] ? do_syscall_64+0x4c/0x640 [ 486.415953] ? SyS_sendfile+0x130/0x130 [ 486.415969] do_syscall_64+0x1d5/0x640 [ 486.415994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.416004] RIP: 0033:0x45cba9 [ 486.416012] RSP: 002b:00007faf29664c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.416027] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.416035] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 486.416043] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.416051] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 486.416059] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007faf296656d4 [ 486.422979] FAULT_INJECTION: forcing a failure. [ 486.422979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.422992] CPU: 0 PID: 14913 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 486.423000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.423006] Call Trace: [ 486.423023] dump_stack+0x1b2/0x283 [ 486.423046] should_fail.cold+0x10a/0x154 [ 486.423069] __alloc_pages_nodemask+0x22b/0x2730 [ 486.423098] ? HARDIRQ_verbose+0x10/0x10 [ 486.423113] ? _copy_from_user+0x94/0x100 [ 486.423139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.423156] ? trace_hardirqs_on+0x10/0x10 [ 486.423175] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.423198] ? HARDIRQ_verbose+0x10/0x10 [ 486.423224] cache_grow_begin+0x91/0x410 [ 486.423250] cache_alloc_refill+0x28c/0x360 [ 486.423274] kmem_cache_alloc+0x333/0x3c0 [ 486.423296] getname_flags+0xc8/0x550 [ 486.423319] do_sys_open+0x202/0x3e0 [ 486.423337] ? filp_open+0x60/0x60 [ 486.423356] ? SyS_clock_settime+0x1a0/0x1a0 [ 486.423371] ? do_syscall_64+0x4c/0x640 [ 486.423382] ? do_sys_open+0x3e0/0x3e0 [ 486.423401] do_syscall_64+0x1d5/0x640 [ 486.423427] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.423437] RIP: 0033:0x416921 [ 486.423445] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 486.423459] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.423468] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 486.423476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 486.423483] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.423491] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 486.509933] FAULT_INJECTION: forcing a failure. [ 486.509933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.509945] CPU: 1 PID: 14920 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 486.509950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.509953] Call Trace: [ 486.509969] dump_stack+0x1b2/0x283 [ 486.509985] should_fail.cold+0x10a/0x154 [ 486.510014] __alloc_pages_nodemask+0x22b/0x2730 [ 486.510028] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.510042] ? kvmalloc_node+0x46/0xd0 [ 486.510054] ? default_file_splice_read+0x17c/0x870 [ 486.510062] ? do_splice_to+0xfb/0x150 [ 486.510071] ? splice_direct_to_actor+0x20a/0x730 [ 486.510078] ? do_splice_direct+0x164/0x210 [ 486.510087] ? do_sendfile+0x469/0xaf0 [ 486.510096] ? SyS_sendfile64+0xff/0x110 [ 486.510105] ? do_syscall_64+0x1d5/0x640 [ 486.510115] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.510127] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.510138] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.510150] ? HARDIRQ_verbose+0x10/0x10 [ 486.510163] ? fs_reclaim_acquire+0x10/0x10 [ 486.510186] alloc_pages_current+0xe7/0x1e0 [ 486.510197] push_pipe+0x3ad/0x720 [ 486.510214] iov_iter_get_pages_alloc+0x4da/0xe40 [ 486.510229] ? is_bpf_text_address+0xa3/0x120 [ 486.510240] ? iov_iter_get_pages+0xc70/0xc70 [ 486.510252] ? unwind_get_return_address+0x51/0x90 [ 486.510259] ? iov_iter_pipe+0x93/0x2b0 [ 486.510272] default_file_splice_read+0x17c/0x870 [ 486.510283] ? depot_save_stack+0x10d/0x401 [ 486.510301] ? do_splice_direct+0x210/0x210 [ 486.510309] ? alloc_pipe_info+0x156/0x380 [ 486.510318] ? splice_direct_to_actor+0x581/0x730 [ 486.510327] ? do_splice_direct+0x164/0x210 [ 486.510335] ? do_sendfile+0x469/0xaf0 [ 486.510342] ? SyS_sendfile64+0xff/0x110 [ 486.510352] ? do_syscall_64+0x1d5/0x640 [ 486.510360] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.510379] ? fsnotify+0x897/0x1110 [ 486.510390] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.510398] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.510413] ? __fsnotify_inode_delete+0x20/0x20 [ 486.510427] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.510442] ? __inode_security_revalidate+0xcf/0x120 [ 486.510452] ? avc_policy_seqno+0x5/0x10 [ 486.510462] ? selinux_file_permission+0x7a/0x440 [ 486.510476] ? security_file_permission+0x82/0x1e0 [ 486.510487] ? rw_verify_area+0xe1/0x290 [ 486.510496] ? do_splice_direct+0x210/0x210 [ 486.510506] do_splice_to+0xfb/0x150 [ 486.510515] ? alloc_pipe_info+0x294/0x380 [ 486.510529] splice_direct_to_actor+0x20a/0x730 [ 486.510542] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.510555] ? do_splice_to+0x150/0x150 [ 486.510566] ? rw_verify_area+0xe1/0x290 [ 486.510579] do_splice_direct+0x164/0x210 [ 486.510592] ? splice_direct_to_actor+0x730/0x730 [ 486.510609] ? rw_verify_area+0xe1/0x290 [ 486.510621] do_sendfile+0x469/0xaf0 [ 486.510639] ? do_compat_pwritev64+0x140/0x140 [ 486.510659] SyS_sendfile64+0xff/0x110 [ 486.510670] ? SyS_sendfile+0x130/0x130 [ 486.510680] ? do_syscall_64+0x4c/0x640 [ 486.510690] ? SyS_sendfile+0x130/0x130 [ 486.510702] do_syscall_64+0x1d5/0x640 [ 486.510719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.510727] RIP: 0033:0x45cba9 [ 486.510733] RSP: 002b:00007f7fe8adcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.510745] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.510751] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 486.510757] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.510763] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 486.510769] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007f7fe8add6d4 [ 486.513500] FAULT_INJECTION: forcing a failure. [ 486.513500] name failslab, interval 1, probability 0, space 0, times 0 [ 486.513512] CPU: 1 PID: 14923 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 486.513518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.513522] Call Trace: [ 486.513536] dump_stack+0x1b2/0x283 [ 486.513552] should_fail.cold+0x10a/0x154 [ 486.513568] should_failslab+0xd6/0x130 [ 486.513579] kmem_cache_alloc+0x28e/0x3c0 [ 486.513593] get_empty_filp+0x86/0x3e0 [ 486.513605] path_openat+0x87/0x2aa0 [ 486.513615] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.513626] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 486.513635] ? kmem_cache_alloc+0x124/0x3c0 [ 486.513643] ? getname_flags+0xc8/0x550 [ 486.513650] ? do_sys_open+0x202/0x3e0 [ 486.513669] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.513683] ? path_mountpoint+0x960/0x960 [ 486.513696] ? trace_hardirqs_on+0x10/0x10 [ 486.513705] ? check_preemption_disabled+0x35/0x240 [ 486.513722] do_filp_open+0x18e/0x250 [ 486.513735] ? may_open_dev+0xe0/0xe0 [ 486.513745] ? __alloc_fd+0x1bf/0x490 [ 486.513758] ? lock_acquire+0x170/0x3f0 [ 486.513767] ? lock_downgrade+0x6e0/0x6e0 [ 486.513845] ? do_raw_spin_unlock+0x164/0x250 [ 486.513856] ? __alloc_fd+0x1bf/0x490 [ 486.513875] do_sys_open+0x292/0x3e0 [ 486.513886] ? filp_open+0x60/0x60 [ 486.513899] ? SyS_clock_settime+0x1a0/0x1a0 [ 486.513910] ? do_syscall_64+0x4c/0x640 [ 486.513918] ? do_sys_open+0x3e0/0x3e0 [ 486.513929] do_syscall_64+0x1d5/0x640 [ 486.513946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.513953] RIP: 0033:0x416921 [ 486.513958] RSP: 002b:00007f7332049bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 486.513969] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.513975] RDX: 00007f7332049be4 RSI: 0000000000000002 RDI: 00007f7332049bd0 [ 486.513981] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 486.513987] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.513993] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f733204a6d4 [ 486.514103] FAULT_INJECTION: forcing a failure. [ 486.514103] name failslab, interval 1, probability 0, space 0, times 0 [ 486.514115] CPU: 0 PID: 14922 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 486.514123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.514128] Call Trace: [ 486.514142] dump_stack+0x1b2/0x283 [ 486.514164] should_fail.cold+0x10a/0x154 [ 486.514184] should_failslab+0xd6/0x130 [ 486.514199] kmem_cache_alloc+0x28e/0x3c0 [ 486.514219] selinux_file_alloc_security+0xaf/0x190 [ 486.514242] security_file_alloc+0x66/0xa0 [ 486.514297] ? selinux_is_enabled+0x5/0x50 [ 486.514314] get_empty_filp+0x15c/0x3e0 [ 486.514329] path_openat+0x87/0x2aa0 [ 486.514341] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.514356] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 486.514381] ? path_mountpoint+0x960/0x960 [ 486.514397] ? trace_hardirqs_on+0x10/0x10 [ 486.514416] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.514435] do_filp_open+0x18e/0x250 [ 486.514451] ? may_open_dev+0xe0/0xe0 [ 486.514467] ? __alloc_fd+0x1bf/0x490 [ 486.514487] ? lock_acquire+0x170/0x3f0 [ 486.514507] ? lock_downgrade+0x6e0/0x6e0 [ 486.514530] ? do_raw_spin_unlock+0x164/0x250 [ 486.514548] ? __alloc_fd+0x1bf/0x490 [ 486.514579] do_sys_open+0x292/0x3e0 [ 486.514596] ? filp_open+0x60/0x60 [ 486.514612] ? SyS_clock_settime+0x1a0/0x1a0 [ 486.514627] ? do_syscall_64+0x4c/0x640 [ 486.514636] ? do_sys_open+0x3e0/0x3e0 [ 486.514651] do_syscall_64+0x1d5/0x640 [ 486.514671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.514680] RIP: 0033:0x416921 [ 486.514688] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 486.514702] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.514708] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 486.514713] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 486.514719] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.514724] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 486.514800] FAULT_INJECTION: forcing a failure. [ 486.514800] name failslab, interval 1, probability 0, space 0, times 0 [ 486.514808] CPU: 1 PID: 14921 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 486.514814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.514821] Call Trace: [ 486.514840] dump_stack+0x1b2/0x283 [ 486.514867] should_fail.cold+0x10a/0x154 [ 486.514889] should_failslab+0xd6/0x130 [ 486.514930] kmem_cache_alloc_node_trace+0x25a/0x400 [ 486.514955] __kmalloc_node+0x38/0x70 [ 486.514968] kvmalloc_node+0x46/0xd0 [ 486.514979] iov_iter_get_pages_alloc+0x48c/0xe40 [ 486.514999] ? is_bpf_text_address+0xa3/0x120 [ 486.515034] ? iov_iter_get_pages+0xc70/0xc70 [ 486.515044] ? __kernel_text_address+0x9/0x30 [ 486.515055] ? unwind_get_return_address+0x51/0x90 [ 486.515062] ? iov_iter_pipe+0x93/0x2b0 [ 486.515078] default_file_splice_read+0x17c/0x870 [ 486.515096] ? depot_save_stack+0x10d/0x401 [ 486.515122] ? do_splice_direct+0x210/0x210 [ 486.515131] ? alloc_pipe_info+0x156/0x380 [ 486.515140] ? splice_direct_to_actor+0x581/0x730 [ 486.515153] ? do_splice_direct+0x164/0x210 [ 486.515165] ? do_sendfile+0x469/0xaf0 [ 486.515184] ? SyS_sendfile64+0xff/0x110 [ 486.515197] ? do_syscall_64+0x1d5/0x640 [ 486.515207] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.515225] ? fsnotify+0x897/0x1110 [ 486.515240] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.515252] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.515288] ? __fsnotify_inode_delete+0x20/0x20 [ 486.515307] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.515329] ? __inode_security_revalidate+0xcf/0x120 [ 486.515340] ? avc_policy_seqno+0x5/0x10 [ 486.515353] ? selinux_file_permission+0x7a/0x440 [ 486.515378] ? security_file_permission+0x82/0x1e0 [ 486.515394] ? rw_verify_area+0xe1/0x290 [ 486.515402] ? do_splice_direct+0x210/0x210 [ 486.515420] do_splice_to+0xfb/0x150 [ 486.515431] ? alloc_pipe_info+0x294/0x380 [ 486.515444] splice_direct_to_actor+0x20a/0x730 [ 486.515458] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.515468] ? do_splice_to+0x150/0x150 [ 486.515480] ? rw_verify_area+0xe1/0x290 [ 486.515493] do_splice_direct+0x164/0x210 [ 486.515509] ? splice_direct_to_actor+0x730/0x730 [ 486.515525] ? rw_verify_area+0xe1/0x290 [ 486.515534] do_sendfile+0x469/0xaf0 [ 486.515546] ? do_compat_pwritev64+0x140/0x140 [ 486.515567] SyS_sendfile64+0xff/0x110 [ 486.515583] ? SyS_sendfile+0x130/0x130 [ 486.515597] ? do_syscall_64+0x4c/0x640 [ 486.515604] ? SyS_sendfile+0x130/0x130 [ 486.515614] do_syscall_64+0x1d5/0x640 [ 486.515629] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.515639] RIP: 0033:0x45cba9 [ 486.515643] RSP: 002b:00007fb9df2b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.515653] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.515658] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 486.515662] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.515667] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000007 [ 486.515672] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007fb9df2b96d4 [ 486.600632] FAULT_INJECTION: forcing a failure. [ 486.600632] name failslab, interval 1, probability 0, space 0, times 0 [ 486.600645] CPU: 1 PID: 14926 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 486.600652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.600656] Call Trace: [ 486.600672] dump_stack+0x1b2/0x283 [ 486.600690] should_fail.cold+0x10a/0x154 [ 486.600707] should_failslab+0xd6/0x130 [ 486.600718] kmem_cache_alloc+0x28e/0x3c0 [ 486.600731] get_empty_filp+0x86/0x3e0 [ 486.600742] path_openat+0x87/0x2aa0 [ 486.600752] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.600762] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 486.600771] ? kmem_cache_alloc+0x124/0x3c0 [ 486.600779] ? getname_flags+0xc8/0x550 [ 486.600786] ? do_sys_open+0x202/0x3e0 [ 486.600797] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.600807] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.600819] ? path_mountpoint+0x960/0x960 [ 486.600830] ? trace_hardirqs_on+0x10/0x10 [ 486.600838] ? check_preemption_disabled+0x35/0x240 [ 486.600855] do_filp_open+0x18e/0x250 [ 486.600866] ? may_open_dev+0xe0/0xe0 [ 486.600876] ? __alloc_fd+0x1bf/0x490 [ 486.600888] ? lock_acquire+0x170/0x3f0 [ 486.600898] ? lock_downgrade+0x6e0/0x6e0 [ 486.600912] ? do_raw_spin_unlock+0x164/0x250 [ 486.600923] ? __alloc_fd+0x1bf/0x490 [ 486.600940] do_sys_open+0x292/0x3e0 [ 486.600951] ? filp_open+0x60/0x60 [ 486.600963] ? SyS_clock_settime+0x1a0/0x1a0 [ 486.600973] ? do_syscall_64+0x4c/0x640 [ 486.600981] ? do_sys_open+0x3e0/0x3e0 [ 486.600992] do_syscall_64+0x1d5/0x640 [ 486.601016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.601025] RIP: 0033:0x416921 [ 486.601031] RSP: 002b:00007f7332049bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 486.601042] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.601049] RDX: 00007f7332049be4 RSI: 0000000000000002 RDI: 00007f7332049bd0 [ 486.601055] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 486.601060] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.601066] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f733204a6d4 [ 486.612982] FAULT_INJECTION: forcing a failure. [ 486.612982] name failslab, interval 1, probability 0, space 0, times 0 [ 486.612997] CPU: 0 PID: 14930 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 486.613006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.613019] Call Trace: [ 486.613039] dump_stack+0x1b2/0x283 [ 486.613070] should_fail.cold+0x10a/0x154 [ 486.613097] should_failslab+0xd6/0x130 [ 486.613119] kmem_cache_alloc+0x28e/0x3c0 [ 486.613145] selinux_file_alloc_security+0xaf/0x190 [ 486.613162] security_file_alloc+0x66/0xa0 [ 486.613172] ? selinux_is_enabled+0x5/0x50 [ 486.613188] get_empty_filp+0x15c/0x3e0 [ 486.613201] path_openat+0x87/0x2aa0 [ 486.613211] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.613226] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 486.613248] ? path_mountpoint+0x960/0x960 [ 486.613261] ? trace_hardirqs_on+0x10/0x10 [ 486.613275] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 486.613294] do_filp_open+0x18e/0x250 [ 486.613310] ? may_open_dev+0xe0/0xe0 [ 486.613325] ? __alloc_fd+0x1bf/0x490 [ 486.613344] ? lock_acquire+0x170/0x3f0 [ 486.613356] ? lock_downgrade+0x6e0/0x6e0 [ 486.613376] ? do_raw_spin_unlock+0x164/0x250 [ 486.613392] ? __alloc_fd+0x1bf/0x490 [ 486.613421] do_sys_open+0x292/0x3e0 [ 486.613437] ? filp_open+0x60/0x60 [ 486.613456] ? SyS_clock_settime+0x1a0/0x1a0 [ 486.613472] ? do_syscall_64+0x4c/0x640 [ 486.613484] ? do_sys_open+0x3e0/0x3e0 [ 486.613503] do_syscall_64+0x1d5/0x640 [ 486.613528] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.613539] RIP: 0033:0x416921 [ 486.613546] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 486.613562] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 486.613570] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 486.613579] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 486.613587] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 486.613595] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 486.616892] FAULT_INJECTION: forcing a failure. [ 486.616892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.616902] CPU: 1 PID: 14927 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 486.616908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.616912] Call Trace: [ 486.616925] dump_stack+0x1b2/0x283 [ 486.616940] should_fail.cold+0x10a/0x154 [ 486.616957] __alloc_pages_nodemask+0x22b/0x2730 [ 486.616970] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.616983] ? kvmalloc_node+0x46/0xd0 [ 486.616995] ? default_file_splice_read+0x17c/0x870 [ 486.617003] ? do_splice_to+0xfb/0x150 [ 486.617012] ? splice_direct_to_actor+0x20a/0x730 [ 486.617020] ? do_splice_direct+0x164/0x210 [ 486.617028] ? do_sendfile+0x469/0xaf0 [ 486.617036] ? SyS_sendfile64+0xff/0x110 [ 486.617045] ? do_syscall_64+0x1d5/0x640 [ 486.617055] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.617068] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.617078] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.617090] ? HARDIRQ_verbose+0x10/0x10 [ 486.617103] ? fs_reclaim_acquire+0x10/0x10 [ 486.617127] alloc_pages_current+0xe7/0x1e0 [ 486.617140] push_pipe+0x3ad/0x720 [ 486.617157] iov_iter_get_pages_alloc+0x4da/0xe40 [ 486.617174] ? is_bpf_text_address+0xa3/0x120 [ 486.617184] ? iov_iter_get_pages+0xc70/0xc70 [ 486.617196] ? unwind_get_return_address+0x51/0x90 [ 486.617203] ? iov_iter_pipe+0x93/0x2b0 [ 486.617217] default_file_splice_read+0x17c/0x870 [ 486.617226] ? depot_save_stack+0x10d/0x401 [ 486.617244] ? do_splice_direct+0x210/0x210 [ 486.617252] ? alloc_pipe_info+0x156/0x380 [ 486.617262] ? splice_direct_to_actor+0x581/0x730 [ 486.617271] ? do_splice_direct+0x164/0x210 [ 486.617279] ? do_sendfile+0x469/0xaf0 [ 486.617287] ? SyS_sendfile64+0xff/0x110 [ 486.617296] ? do_syscall_64+0x1d5/0x640 [ 486.617305] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.617323] ? fsnotify+0x897/0x1110 [ 486.617334] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.617342] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.617358] ? __fsnotify_inode_delete+0x20/0x20 [ 486.617371] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.617386] ? __inode_security_revalidate+0xcf/0x120 [ 486.617395] ? avc_policy_seqno+0x5/0x10 [ 486.617405] ? selinux_file_permission+0x7a/0x440 [ 486.617418] ? security_file_permission+0x82/0x1e0 [ 486.617429] ? rw_verify_area+0xe1/0x290 [ 486.617438] ? do_splice_direct+0x210/0x210 [ 486.617449] do_splice_to+0xfb/0x150 [ 486.617458] ? alloc_pipe_info+0x294/0x380 [ 486.617471] splice_direct_to_actor+0x20a/0x730 [ 486.617485] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.617499] ? do_splice_to+0x150/0x150 [ 486.617518] ? rw_verify_area+0xe1/0x290 [ 486.617532] do_splice_direct+0x164/0x210 [ 486.617546] ? splice_direct_to_actor+0x730/0x730 [ 486.617567] ? rw_verify_area+0xe1/0x290 [ 486.617580] do_sendfile+0x469/0xaf0 [ 486.617597] ? do_compat_pwritev64+0x140/0x140 [ 486.617617] SyS_sendfile64+0xff/0x110 [ 486.617628] ? SyS_sendfile+0x130/0x130 [ 486.617638] ? do_syscall_64+0x4c/0x640 [ 486.617648] ? SyS_sendfile+0x130/0x130 [ 486.617659] do_syscall_64+0x1d5/0x640 [ 486.617675] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.617683] RIP: 0033:0x45cba9 [ 486.617689] RSP: 002b:00007fb9df2b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.617699] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.617706] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 486.617712] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.617717] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000007 [ 486.617724] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007fb9df2b96d4 [ 486.679344] FAULT_INJECTION: forcing a failure. [ 486.679344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.679356] CPU: 1 PID: 14933 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 486.679361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.679365] Call Trace: [ 486.679381] dump_stack+0x1b2/0x283 [ 486.679398] should_fail.cold+0x10a/0x154 [ 486.679412] __alloc_pages_nodemask+0x22b/0x2730 [ 486.679426] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 486.679440] ? kvmalloc_node+0x46/0xd0 [ 486.679450] ? default_file_splice_read+0x17c/0x870 [ 486.679459] ? do_splice_to+0xfb/0x150 [ 486.679469] ? splice_direct_to_actor+0x20a/0x730 [ 486.679477] ? do_splice_direct+0x164/0x210 [ 486.679485] ? do_sendfile+0x469/0xaf0 [ 486.679494] ? SyS_sendfile64+0xff/0x110 [ 486.679513] ? do_syscall_64+0x1d5/0x640 [ 486.679524] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.679537] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.679548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 486.679560] ? HARDIRQ_verbose+0x10/0x10 [ 486.679573] ? fs_reclaim_acquire+0x10/0x10 [ 486.679598] alloc_pages_current+0xe7/0x1e0 [ 486.679610] push_pipe+0x3ad/0x720 [ 486.679627] iov_iter_get_pages_alloc+0x4da/0xe40 [ 486.679642] ? is_bpf_text_address+0xa3/0x120 [ 486.679652] ? iov_iter_get_pages+0xc70/0xc70 [ 486.679664] ? unwind_get_return_address+0x51/0x90 [ 486.679672] ? iov_iter_pipe+0x93/0x2b0 [ 486.679686] default_file_splice_read+0x17c/0x870 [ 486.679695] ? depot_save_stack+0x10d/0x401 [ 486.679714] ? do_splice_direct+0x210/0x210 [ 486.679723] ? alloc_pipe_info+0x156/0x380 [ 486.679732] ? splice_direct_to_actor+0x581/0x730 [ 486.679741] ? do_splice_direct+0x164/0x210 [ 486.679749] ? do_sendfile+0x469/0xaf0 [ 486.679758] ? SyS_sendfile64+0xff/0x110 [ 486.679767] ? do_syscall_64+0x1d5/0x640 [ 486.679776] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.679788] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.679803] ? fsnotify+0x897/0x1110 [ 486.679812] ? HARDIRQ_verbose+0x10/0x10 [ 486.679821] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.679830] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 486.679846] ? __fsnotify_inode_delete+0x20/0x20 [ 486.679859] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 486.679875] ? __inode_security_revalidate+0xcf/0x120 [ 486.679885] ? avc_policy_seqno+0x5/0x10 [ 486.679895] ? selinux_file_permission+0x7a/0x440 [ 486.679909] ? security_file_permission+0x82/0x1e0 [ 486.679921] ? rw_verify_area+0xe1/0x290 [ 486.679931] ? do_splice_direct+0x210/0x210 [ 486.679947] do_splice_to+0xfb/0x150 [ 486.679956] ? alloc_pipe_info+0x294/0x380 [ 486.679970] splice_direct_to_actor+0x20a/0x730 [ 486.679984] ? generic_pipe_buf_nosteal+0x10/0x10 [ 486.679997] ? do_splice_to+0x150/0x150 [ 486.680008] ? rw_verify_area+0xe1/0x290 [ 486.680021] do_splice_direct+0x164/0x210 [ 486.680033] ? splice_direct_to_actor+0x730/0x730 [ 486.680048] ? rw_verify_area+0xe1/0x290 [ 486.680060] do_sendfile+0x469/0xaf0 [ 486.680077] ? do_compat_pwritev64+0x140/0x140 [ 486.680095] SyS_sendfile64+0xff/0x110 [ 486.680105] ? SyS_sendfile+0x130/0x130 [ 486.680115] ? do_syscall_64+0x4c/0x640 [ 486.680125] ? SyS_sendfile+0x130/0x130 [ 486.680136] do_syscall_64+0x1d5/0x640 [ 486.680153] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 486.680161] RIP: 0033:0x45cba9 [ 486.680167] RSP: 002b:00007fb9df2b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.680179] RAX: ffffffffffffffda RBX: 00000000004fe300 RCX: 000000000045cba9 [ 486.680185] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 486.680191] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 486.680196] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000007 [ 486.680202] R13: 0000000000000918 R14: 00000000004cbed0 R15: 00007fb9df2b96d4 [ 486.690467] FAULT_INJECTION: forcing a failure. [ 486.690467] name failslab, interval 1, probability 0, space 0, times 0 [ 490.320718] CPU: 0 PID: 14934 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 490.320726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.320730] Call Trace: [ 490.320748] dump_stack+0x1b2/0x283 [ 490.320765] should_fail.cold+0x10a/0x154 [ 490.320781] should_failslab+0xd6/0x130 [ 490.320792] kmem_cache_alloc+0x28e/0x3c0 [ 490.320807] selinux_file_alloc_security+0xaf/0x190 [ 490.320819] security_file_alloc+0x66/0xa0 [ 490.320836] ? selinux_is_enabled+0x5/0x50 [ 490.320848] get_empty_filp+0x15c/0x3e0 [ 490.320859] path_openat+0x87/0x2aa0 [ 490.320869] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 490.320880] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 490.320897] ? path_mountpoint+0x960/0x960 [ 490.320909] ? trace_hardirqs_on+0x10/0x10 [ 490.320921] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 490.320935] do_filp_open+0x18e/0x250 [ 490.320947] ? may_open_dev+0xe0/0xe0 [ 490.320957] ? __alloc_fd+0x1bf/0x490 [ 490.320970] ? lock_acquire+0x170/0x3f0 [ 490.320979] ? lock_downgrade+0x6e0/0x6e0 [ 490.320994] ? do_raw_spin_unlock+0x164/0x250 [ 490.321004] ? __alloc_fd+0x1bf/0x490 [ 490.321021] do_sys_open+0x292/0x3e0 [ 490.321032] ? filp_open+0x60/0x60 [ 490.321045] ? SyS_clock_settime+0x1a0/0x1a0 [ 490.321057] ? do_syscall_64+0x4c/0x640 [ 490.321065] ? do_sys_open+0x3e0/0x3e0 [ 490.321077] do_syscall_64+0x1d5/0x640 [ 490.321093] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 490.321102] RIP: 0033:0x416921 [ 490.321107] RSP: 002b:00007f7332049bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 490.321118] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 490.321124] RDX: 00007f7332049be4 RSI: 0000000000000002 RDI: 00007f7332049bd0 [ 490.321130] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 490.321136] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 490.321142] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f733204a6d4 17:03:55 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:55 executing program 4 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @multicast2}, 0x15, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000000)='macvlan1\x00', 0x77d, 0x10001, 0x9}) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:55 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000080)=0x18) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r8, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1}], {}, [{}, {0x8, 0x4}, {0x8, 0x1, r8}], {}, {0x20, 0x2}}, 0x4c, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in=@multicast1, 0x4e20, 0x0, 0x4e21, 0x4, 0xa, 0xe0, 0x80, 0x73}, {0x6, 0x7, 0x3, 0x740f, 0x8001, 0x8, 0x326, 0x80000001}, {0x2, 0x8, 0x1f, 0xfffffffffffffff7}, 0x10000, 0x6e6bbb, 0x2, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x33}, 0x2, @in=@empty, 0x3504, 0x3, 0x2, 0xd3, 0xb5, 0x1ff, 0x7ff}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={r4, 0xfffffffe}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r4, 0x11, "fc96232cb1179c2460874ac78fc65750e8"}, &(0x7f00000000c0)=0x19) 17:03:55 executing program 2: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x20000, 0xf0ef9367165a468) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x1, 0x4) 17:03:55 executing program 4 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 490.699177] FAULT_INJECTION: forcing a failure. [ 490.699177] name failslab, interval 1, probability 0, space 0, times 0 [ 490.699201] CPU: 0 PID: 14955 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 17:03:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000340)=""/233, 0xe9) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000000340)=""/233, 0xe9) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 490.699210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.699215] Call Trace: [ 490.699235] dump_stack+0x1b2/0x283 [ 490.699259] should_fail.cold+0x10a/0x154 [ 490.699283] should_failslab+0xd6/0x130 [ 490.699298] kmem_cache_alloc+0x28e/0x3c0 [ 490.699318] __d_alloc+0x2a/0x9b0 [ 490.699338] d_alloc+0x46/0x240 [ 490.699357] d_alloc_parallel+0xd6/0x16e0 [ 490.699380] ? lock_acquire+0x170/0x3f0 [ 490.699392] ? lock_downgrade+0x6e0/0x6e0 [ 490.699418] ? __d_lookup_rcu+0x640/0x640 [ 490.699434] ? mark_held_locks+0xa6/0xf0 [ 490.699447] ? d_lookup+0x177/0x230 [ 490.699468] ? d_lookup+0x15a/0x230 [ 490.699488] lookup_open+0x459/0x1700 [ 490.699529] ? may_open.isra.0+0x290/0x290 [ 490.699573] path_openat+0x14ac/0x2aa0 [ 490.699609] ? path_mountpoint+0x960/0x960 [ 490.699634] ? trace_hardirqs_on+0x10/0x10 [ 490.699655] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 490.699684] do_filp_open+0x18e/0x250 17:03:55 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1088c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe}, 0x0, 0x0, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 490.699703] ? may_open_dev+0xe0/0xe0 [ 490.699735] ? simple_attr_release+0x40/0x40 [ 490.699762] ? do_raw_spin_unlock+0x164/0x250 [ 490.699779] ? __alloc_fd+0x1bf/0x490 [ 490.699811] do_sys_open+0x292/0x3e0 [ 490.699828] ? filp_open+0x60/0x60 [ 490.699845] ? SyS_clock_settime+0x1a0/0x1a0 [ 490.699859] ? do_syscall_64+0x4c/0x640 [ 490.699870] ? do_sys_open+0x3e0/0x3e0 [ 490.699888] do_syscall_64+0x1d5/0x640 [ 490.699914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 490.699925] RIP: 0033:0x416921 [ 490.699933] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 490.699948] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 490.699956] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 490.699964] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 490.699972] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 490.699981] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 490.774744] FAULT_INJECTION: forcing a failure. 17:03:55 executing program 4 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 490.774744] name failslab, interval 1, probability 0, space 0, times 0 [ 490.964936] CPU: 1 PID: 14964 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 490.964943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.964948] Call Trace: [ 490.964964] dump_stack+0x1b2/0x283 17:03:55 executing program 4 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 490.964982] should_fail.cold+0x10a/0x154 [ 490.964998] should_failslab+0xd6/0x130 [ 490.965009] kmem_cache_alloc+0x28e/0x3c0 [ 490.965022] __d_alloc+0x2a/0x9b0 [ 490.965034] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 490.965046] d_alloc+0x46/0x240 [ 490.965060] d_alloc_parallel+0xd6/0x16e0 [ 490.965075] ? lock_acquire+0x170/0x3f0 [ 490.965085] ? lock_downgrade+0x6e0/0x6e0 [ 490.965103] ? __d_lookup_rcu+0x640/0x640 [ 490.965113] ? mark_held_locks+0xa6/0xf0 [ 490.965124] ? d_lookup+0x177/0x230 [ 490.965138] ? d_lookup+0x15a/0x230 [ 490.965159] lookup_open+0x459/0x1700 [ 490.965234] ? build_sched_domains+0xd20/0x3ad0 [ 490.965256] ? may_open.isra.0+0x290/0x290 [ 490.965282] path_openat+0x14ac/0x2aa0 [ 490.965295] ? kmem_cache_alloc+0xf1/0x3c0 [ 490.965311] ? path_mountpoint+0x960/0x960 [ 490.965322] ? trace_hardirqs_on+0x10/0x10 [ 490.965332] ? check_preemption_disabled+0x35/0x240 [ 490.965350] do_filp_open+0x18e/0x250 [ 490.965362] ? may_open_dev+0xe0/0xe0 [ 490.965380] ? simple_attr_release+0x40/0x40 [ 490.965396] ? do_raw_spin_unlock+0x164/0x250 [ 490.965407] ? __alloc_fd+0x1bf/0x490 [ 490.965425] do_sys_open+0x292/0x3e0 [ 490.965437] ? filp_open+0x60/0x60 [ 490.965450] ? SyS_clock_settime+0x1a0/0x1a0 [ 490.965462] ? do_syscall_64+0x4c/0x640 [ 490.965470] ? do_sys_open+0x3e0/0x3e0 [ 490.965484] do_syscall_64+0x1d5/0x640 [ 490.965502] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 490.965510] RIP: 0033:0x416921 [ 490.965516] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 490.965527] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 490.965534] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 490.965540] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 490.965546] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 490.965552] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 491.013237] FAULT_INJECTION: forcing a failure. [ 491.013237] name failslab, interval 1, probability 0, space 0, times 0 [ 491.013251] CPU: 0 PID: 14978 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 491.013259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.013265] Call Trace: [ 491.013283] dump_stack+0x1b2/0x283 [ 491.013308] should_fail.cold+0x10a/0x154 [ 491.013331] should_failslab+0xd6/0x130 [ 491.013347] kmem_cache_alloc+0x28e/0x3c0 [ 491.013438] ? proc_i_callback+0x20/0x20 [ 491.013454] proc_alloc_inode+0x18/0x1a0 [ 491.013466] ? proc_i_callback+0x20/0x20 [ 491.013477] alloc_inode+0x5d/0x170 [ 491.013492] new_inode_pseudo+0x14/0xe0 [ 491.013508] new_inode+0x1b/0x40 [ 491.013519] proc_pid_make_inode+0x22/0x230 [ 491.013538] proc_pident_instantiate+0x78/0x280 [ 491.013556] proc_pident_lookup+0x17a/0x1f0 [ 491.013571] ? d_lookup+0x15a/0x230 [ 491.013587] ? proc_tid_base_lookup+0x30/0x30 [ 491.013601] lookup_open+0x5aa/0x1700 [ 491.013643] ? may_open.isra.0+0x290/0x290 [ 491.013697] path_openat+0x14ac/0x2aa0 [ 491.013734] ? path_mountpoint+0x960/0x960 [ 491.013752] ? trace_hardirqs_on+0x10/0x10 [ 491.013772] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 491.013793] do_filp_open+0x18e/0x250 [ 491.013814] ? may_open_dev+0xe0/0xe0 [ 491.013845] ? simple_attr_release+0x40/0x40 [ 491.013871] ? do_raw_spin_unlock+0x164/0x250 [ 491.013888] ? __alloc_fd+0x1bf/0x490 [ 491.013923] do_sys_open+0x292/0x3e0 [ 491.013940] ? filp_open+0x60/0x60 [ 491.013957] ? SyS_clock_settime+0x1a0/0x1a0 [ 491.013976] ? do_syscall_64+0x4c/0x640 [ 491.013988] ? do_sys_open+0x3e0/0x3e0 [ 491.014007] do_syscall_64+0x1d5/0x640 [ 491.014034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 491.014047] RIP: 0033:0x416921 [ 491.014055] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 491.014071] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 491.014079] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 491.014088] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 491.014097] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 491.014106] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 491.050631] FAULT_INJECTION: forcing a failure. [ 491.050631] name failslab, interval 1, probability 0, space 0, times 0 [ 491.433925] CPU: 0 PID: 14982 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 491.433934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.433939] Call Trace: [ 491.433960] dump_stack+0x1b2/0x283 [ 491.433984] should_fail.cold+0x10a/0x154 [ 491.434007] should_failslab+0xd6/0x130 [ 491.434022] kmem_cache_alloc+0x28e/0x3c0 [ 491.434044] selinux_inode_alloc_security+0xb1/0x2a0 [ 491.434062] security_inode_alloc+0x8f/0xd0 [ 491.434080] inode_init_always+0x576/0xb10 [ 491.434096] alloc_inode+0x7a/0x170 [ 491.434136] new_inode_pseudo+0x14/0xe0 [ 491.434151] new_inode+0x1b/0x40 [ 491.434164] proc_pid_make_inode+0x22/0x230 [ 491.434180] proc_pident_instantiate+0x78/0x280 [ 491.434196] proc_pident_lookup+0x17a/0x1f0 [ 491.434211] ? d_lookup+0x15a/0x230 [ 491.434225] ? proc_tid_base_lookup+0x30/0x30 17:03:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1={0xff, 0x0}}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x10, 0x70bd2b, 0x1, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 491.434238] lookup_open+0x5aa/0x1700 [ 491.434279] ? may_open.isra.0+0x290/0x290 [ 491.434320] path_openat+0x14ac/0x2aa0 [ 491.434354] ? path_mountpoint+0x960/0x960 [ 491.434371] ? trace_hardirqs_on+0x10/0x10 [ 491.434407] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 491.434428] do_filp_open+0x18e/0x250 [ 491.434445] ? may_open_dev+0xe0/0xe0 [ 491.434474] ? simple_attr_release+0x40/0x40 [ 491.434509] ? do_raw_spin_unlock+0x164/0x250 [ 491.434543] ? __alloc_fd+0x1bf/0x490 [ 491.434573] do_sys_open+0x292/0x3e0 [ 491.434590] ? filp_open+0x60/0x60 [ 491.434608] ? SyS_clock_settime+0x1a0/0x1a0 [ 491.434634] ? do_syscall_64+0x4c/0x640 [ 491.434645] ? do_sys_open+0x3e0/0x3e0 [ 491.434662] do_syscall_64+0x1d5/0x640 [ 491.434688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 491.434697] RIP: 0033:0x416921 [ 491.434705] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 17:03:56 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200a00, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffffffffffffffe0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x44901) r6 = socket$packet(0x11, 0x2, 0x300) dup2(r6, r5) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendfile(r3, r4, 0x0, 0x800000080004105) 17:03:56 executing program 4 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 491.434720] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 491.434727] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 491.434735] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 491.434742] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 491.434750] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 [ 491.743115] FAULT_INJECTION: forcing a failure. [ 491.743115] name failslab, interval 1, probability 0, space 0, times 0 [ 491.743132] CPU: 0 PID: 15004 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 491.743141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.743147] Call Trace: [ 491.743167] dump_stack+0x1b2/0x283 [ 491.743192] should_fail.cold+0x10a/0x154 [ 491.743216] should_failslab+0xd6/0x130 [ 491.743232] __kmalloc+0x2c1/0x400 [ 491.743244] ? __seq_open_private+0x1f/0xc0 [ 491.743266] __seq_open_private+0x1f/0xc0 [ 491.743281] seq_open_private+0x21/0x40 [ 491.743298] mounts_open_common+0x1d8/0x470 [ 491.743312] ? show_vfsmnt+0x3a0/0x3a0 [ 491.743327] ? show_sb_opts+0xe0/0xe0 [ 491.743355] do_dentry_open+0x44b/0xec0 [ 491.743368] ? mounts_open+0x30/0x30 [ 491.743387] ? __inode_permission+0xcd/0x2f0 [ 491.743405] vfs_open+0x105/0x220 [ 491.743426] path_openat+0xb68/0x2aa0 [ 491.743460] ? path_mountpoint+0x960/0x960 [ 491.743477] ? trace_hardirqs_on+0x10/0x10 [ 491.743496] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 491.743516] do_filp_open+0x18e/0x250 [ 491.743533] ? may_open_dev+0xe0/0xe0 [ 491.743561] ? simple_attr_release+0x40/0x40 [ 491.743584] ? do_raw_spin_unlock+0x164/0x250 [ 491.743601] ? __alloc_fd+0x1bf/0x490 [ 491.743629] do_sys_open+0x292/0x3e0 [ 491.743646] ? filp_open+0x60/0x60 [ 491.743663] ? SyS_clock_settime+0x1a0/0x1a0 [ 491.743678] ? do_syscall_64+0x4c/0x640 [ 491.743689] ? do_sys_open+0x3e0/0x3e0 [ 491.743707] do_syscall_64+0x1d5/0x640 [ 491.743733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 491.743743] RIP: 0033:0x416921 [ 491.743751] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 491.743766] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 491.743774] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 491.743782] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 491.743791] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 491.743799] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 17:03:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffff446, 0x3001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4123aebb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:56 executing program 4 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x29, 0x3, "ba6037a3c583a3e5afa71f1848e8bbfe63d69f67bb37ca66323aacd65865b06244e80f22bf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e0b9655464689e53e36956eee62826b86d7eeea8"}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b1}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040004) dup2(r1, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1={0xff, 0x0}}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r7 = socket$packet(0x11, 0x2, 0x300) dup2(r7, r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@ipv4={[], [], @multicast1}, 0x669, 0x1, 0x3, 0x8, 0x7, 0x2}, 0x20) 17:03:56 executing program 2: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x482, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:56 executing program 4 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x2, 0x5, {0x7fff}}, 0x18) [ 492.062730] FAULT_INJECTION: forcing a failure. [ 492.062730] name failslab, interval 1, probability 0, space 0, times 0 [ 492.062964] CPU: 0 PID: 15019 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 492.062971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.062977] Call Trace: [ 492.063013] dump_stack+0x1b2/0x283 [ 492.063048] should_fail.cold+0x10a/0x154 [ 492.063085] should_failslab+0xd6/0x130 [ 492.063101] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 492.063122] seq_open+0x7b/0x1f0 [ 492.063139] __seq_open_private+0x37/0xc0 [ 492.063154] seq_open_private+0x21/0x40 [ 492.063170] mounts_open_common+0x1d8/0x470 [ 492.063183] ? show_vfsmnt+0x3a0/0x3a0 [ 492.063198] ? show_sb_opts+0xe0/0xe0 [ 492.063223] do_dentry_open+0x44b/0xec0 [ 492.063236] ? mounts_open+0x30/0x30 [ 492.063254] ? __inode_permission+0xcd/0x2f0 [ 492.063272] vfs_open+0x105/0x220 [ 492.063292] path_openat+0xb68/0x2aa0 [ 492.063325] ? path_mountpoint+0x960/0x960 [ 492.063342] ? trace_hardirqs_on+0x10/0x10 [ 492.063361] ? perf_trace_lock_acquire+0x32c/0x4b0 [ 492.063379] do_filp_open+0x18e/0x250 [ 492.063392] ? may_open_dev+0xe0/0xe0 [ 492.063420] ? simple_attr_release+0x40/0x40 [ 492.063442] ? do_raw_spin_unlock+0x164/0x250 [ 492.063464] ? __alloc_fd+0x1bf/0x490 [ 492.063491] do_sys_open+0x292/0x3e0 [ 492.063526] ? filp_open+0x60/0x60 [ 492.063542] ? SyS_clock_settime+0x1a0/0x1a0 [ 492.063561] ? do_syscall_64+0x4c/0x640 [ 492.063572] ? do_sys_open+0x3e0/0x3e0 [ 492.063590] do_syscall_64+0x1d5/0x640 [ 492.063615] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 492.063626] RIP: 0033:0x416921 [ 492.063634] RSP: 002b:00007f0f7922bbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 492.063649] RAX: ffffffffffffffda RBX: 000000000050c180 RCX: 0000000000416921 [ 492.063657] RDX: 00007f0f7922bbe4 RSI: 0000000000000002 RDI: 00007f0f7922bbd0 [ 492.063666] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000014 [ 492.063673] R10: 0000000000000009 R11: 0000000000000293 R12: 0000000000000004 [ 492.063681] R13: 0000000000000c92 R14: 00000000004cee3f R15: 00007f0f7922c6d4 17:03:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x40000, 0xde, 0x77d, r0, 0x0, &(0x7f0000000080)={0x990a7b, 0x7a8a, [], @string=&(0x7f0000000000)=0x40}}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000001c0)={{{0xe, 0x1}}, 0xc, 0x100, &(0x7f0000000180)="21f79a5e449ad0796811b894"}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x4, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0x4, 0x2, "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"}) 17:03:57 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 17:03:57 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10000, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x97, 0x72, 0x8, 0x20, 0x1ff, 0x401}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 17:03:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x400002) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 17:03:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x408c0) 17:03:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4801, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0xc, 0x59, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, '\b\x00G\x00'}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x20000, 0x6, @fd, 0x4000}, 0xff00}) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000280)={0xfe9, "e602b61c870c7e1414db7360b50e0057b0ae06d7647277832ee147b25b2c295b", 0x3, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000200)=0xc) setuid(r5) r6 = getegid() r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r8, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040000000007000008000000", @ANYRES32=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="10000000000000002000020000000000"], 0x4c, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@mmap='mmap'}, {@posixacl='posixacl'}, {@version_L='version=9p2000.L'}, {@access_uid={'access', 0x3d, r5}}], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x20000) r3 = fcntl$getown(r2, 0x9) syz_open_procfs(r3, &(0x7f0000000000)='wchan\x00') 17:03:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xd5, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r2) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x655, 0x5}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000340)={0x9f0000, 0xcd4f, 0x6, r4, 0x0, &(0x7f0000000300)={0x9a090c, 0x99a, [], @p_u32=&(0x7f00000002c0)=0x57287e8b}}) connect$caif(r5, &(0x7f0000000380), 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x2) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000020601000009000005000400ff7f000000000000000000000000000000000000f3dbcfad3bd1f325e15a3668c3c293bc7c6787c8148cab5706b55acea034c41a350f76b807a84201a8fc5a424626b1fbf2993bb6b0ac8708cd04ed85e8b2e5701c12636d0dfe5cd21c3fdb424292d134e84ee8abdde4405e070a5a62f6f8cdcb2562afa4a8de6431a3dfece97d7a6d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x20080811}, 0x4004011) dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:57 executing program 2: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xd5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000000c0)=[{0x1, 0x7}, {0x1}], 0x2) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) semop(r1, &(0x7f0000000000)=[{0x1, 0x800, 0x800}, {0x4, 0x7, 0x800}, {0x0, 0x401}, {0x3, 0x7a7, 0xa32e7a45afefd507}], 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004105) 17:03:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ecb-twofish-avx,sha512-ssse3)\x00'}, 0x58) 17:03:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004105) 17:03:58 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') 17:03:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') 17:03:58 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r5, 0x9}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0xf20, 0x7fffffff}) sendfile(r1, r6, 0x0, 0x800000080004105) 17:03:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast1}, &(0x7f0000000080)=0x14) 17:03:58 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000340)=""/233, 0xe9) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000340)=""/233, 0xe9) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$read(0xb, r2, &(0x7f0000000340)=""/233, 0xe9) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000000340)=""/233, 0xe9) keyctl$unlink(0x9, r2, r3) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x8b, 0x3, 0x81, "db9047eaf28e5c4c974818089b274188", "4d992f1e5cc7cf834c7c5d9b23d0c1a758da7acf85780ab6c07a7ad6c404c82f1aa07d00a1ee1437c6524c2602a8fae317c2855dad2d1a296d1b52b24a88f866d2441495ef0f30e6a1343c5a0574eb6d74f5f530e6c5d8d6ff2063ca9ff2997f03b8bf6269d9ef0371932222bee1f5001ddc05a3ccaf"}, 0x8b, 0x2) 17:03:58 executing program 2: socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x404000, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)="5adb3ea3eca31cbe77452d946ea5d0875b108a5cfd7be4f69c0bf22bdea694f8fe500a899013f6bd7e7d04f23a1f91c2652e2e69cbf90c154c8047ac7bce78b098af7cb5a09ea8a5cfadbc727ebb806112ee86db32beb922877268933de86a2d04c322deb646da97cbcc9c57309a54269091805476382e5c15d08a2736c6d0482053e0debcb05e6875cda1adce14e51c9dd76b86028d20dcc430710034459dd3cb094e53fdcd2421564ae1bc0936efcd1bbb694a20a0d9d0", 0xb8}], 0x1) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x1, 0x5, 0x4, 0x300, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "056c00"}, 0x4000001, 0x2, @userptr=0x2, 0xff00}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x7, 0x9}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup2(r6, r5) sendto$rose(r7, &(0x7f0000000440)="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", 0xfb, 0x840, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x8001, 0x4]}, &(0x7f00000001c0)=0x8) 17:03:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/30) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8200, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000180)) dup2(r1, r0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x3, 0x79}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xd}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ip_tables_targets\x00') r3 = getpid() sched_setattr(r3, &(0x7f0000000200)={0x38, 0x2, 0x0, 0xffffffff, 0x5, 0x3, 0x400000000000, 0x0, 0x0, 0x100}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3a, 0x1f, 0xf7, 0x7, 0x0, 0x100, 0x40000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x20, 0x1000, 0x2, 0x7, 0x3, 0x8}, r3, 0xf, r4, 0x8) 17:03:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r4, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, [], 0x1}, 0x1}}, 0xffffffff, 0x2, 0xff, 0x995f, 0x1, 0x200, 0x7f}, &(0x7f0000000000)=0x9c) 17:03:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$setlease(r2, 0x400, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0xfffffffe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r5, 0x3, 0xaa, 0x8}, &(0x7f0000000180)=0x10) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:03:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x204c01, 0x0) read$fb(r2, &(0x7f0000000180)=""/140, 0x8c) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r4 = socket$packet(0x11, 0x2, 0x300) dup2(r4, r3) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x305002) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc000000040b010825bd7000fcdbdf250a000002080066000000000079e47d6d36ff5edc316ae9914d08508b569c10702bc955e6b4f924b9b5170b5b015028b5c2ddfb9e0b1ee2c2a8f8ae58a94061c3cb160f73a8eef49f27cf0851ff2822999756d5c3fe49765ac5ed4a521e722efb1e5b8b521e13aa215c17cf92f6795897128b9cc300c590302c336b80873d868ed359decb25ea45c61033f8230321d6b270857208000100", @ANYRES32=r2, @ANYBLOB="040049000f002100a779126517cfe7977fbbda000c00558008000000", @ANYRES32=r1, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x800, 0x0) 17:03:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102}, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={{0x0, 0x0, @reserved="44d5a340223dd60d637b24372d9b74eed1179823b926d6d66d7235cb4256ef05"}, 0xe4, r5, [], "a644a9c76f411f88c2abfbec7fbf98a26372a0059257532a99f668f87298fae9e6957e36254056185a3dc3230bc58eb26d7e4a066742d54d5066e4cfd16158f6303e449eda7ec2ee60793f102b582604e9f0a41495f0ff7453ae569efe84da37962f5fc5c3de8dcb5de9cb223c5afa53ea3fbd9c66eb9ffe776705331777e2df2048c6e70e5532e711eb69312f41f317a98afdcb28cc25e04052d9781dfd90a129017e28a6c8e7ed7897874e97f060a5838bac8b7ed965173091770aaf3d962db201b574646d3c0751b4e2cfa77bd70121c9510d7cc0cfa191507c0a694098ac28661cff"}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000200)={0x80000001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendfile(r2, r3, 0x0, 0x800000080004105) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) [ 494.635762] encrypted_key: insufficient parameters specified 17:03:59 executing program 2: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:03:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x0, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:03:59 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 495.452987] encrypted_key: insufficient parameters specified 17:04:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:04:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r2 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r1) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004105) 17:04:00 executing program 2: socket$packet(0x11, 0x0, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 17:04:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x4, &(0x7f0000000000)=',]]\x00', r3}, 0x30) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r6, 0x4}, 0x8) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, r4, 0x0, 0xffffffffffffffff, 0x1) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$setown(r7, 0x8, r8) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/123) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:04:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x4}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=0x0, 0x80000000}) 17:04:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 17:04:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xd5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x2, 0x20, 0x6, 0x400}) 17:04:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004105) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x32000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r5 = socket$packet(0x11, 0x2, 0x300) dup2(r5, r4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000080)={r4, 0x8, 0x471, "e26ff28ac385fb5a3e4b7e1b440777ac707ee1673af6fcb8ba1421ccf84c62384dd49521e0a14b64a03cfbf9e5ef9e31bd107331cf8d54304af97ae070f0decce8fff3781471e37dc9c510cd"}) 17:04:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280)) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xd72a, 0x2100) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = getpid() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x560f, &(0x7f0000000000)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x2, 0xbc, 0x6f, 0x8, 0x0, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f00000000c0)}, 0xc040, 0x401, 0x10000, 0x6, 0x9, 0x6, 0xff7f}, r3, 0x6, r2, 0xa) r5 = eventfd(0x806) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0xcf44, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x300, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd}, 0xff00}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000380)={0x1, 0x0, {0x3, 0x100, 0x4000005, 0x8}}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000)) [ 496.454581] divide error: 0000 [#1] PREEMPT SMP KASAN [ 496.454584] Modules linked in: [ 496.454595] CPU: 1 PID: 12720 Comm: kworker/1:0 Not tainted 4.14.184-syzkaller #0 [ 496.454599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.454692] Workqueue: events console_callback [ 496.454700] task: ffff8880a4746180 task.stack: ffff888038c58000 [ 496.454728] RIP: 0010:fbcon_switch+0x1cb/0x1700 [ 496.454732] RSP: 0000:ffff888038c5fa88 EFLAGS: 00010246 [ 496.454739] RAX: 0000000000008000 RBX: 0000000000000000 RCX: 0000000000000000 [ 496.454744] RDX: 0000000000000000 RSI: ffffffff8ad70140 RDI: ffff888087220f3c [ 496.454748] RBP: ffff8882192c0040 R08: 0000000000000001 R09: 0000000000000000 [ 496.454751] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888087220c00 [ 496.454755] R13: ffff8880a5f64dc0 R14: 0000000000000001 R15: ffff888087221078 [ 496.454761] FS: 0000000000000000(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 496.454766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.454770] CR2: 0000001b30025000 CR3: 00000000a984e000 CR4: 00000000001426e0 [ 496.454778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 496.454782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 496.454784] Call Trace: [ 496.454796] ? lock_downgrade+0x6e0/0x6e0 [ 496.454805] ? fbcon_set_font+0x7c0/0x7c0 [ 496.454843] ? kernfs_notify+0x98/0x160 [ 496.454853] ? mark_held_locks+0xa6/0xf0 [ 496.454863] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 496.454870] ? kernfs_put+0x24/0x480 [ 496.454876] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 496.454883] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 496.454889] ? fbcon_set_origin+0x1c/0x40 [ 496.454895] ? fbcon_scrolldelta+0x1080/0x1080 [ 496.454903] redraw_screen+0x332/0x760 [ 496.454910] ? fb_get_color_depth+0x5a/0x70 [ 496.454916] ? set_palette+0x130/0x130 [ 496.454922] ? get_color+0x1b8/0x3a0 [ 496.454932] complete_change_console+0xf9/0x350 [ 496.454940] change_console+0x156/0x270 [ 496.454947] console_callback+0x32c/0x380 [ 496.454954] ? poke_blanked_console+0x1d0/0x1d0 [ 496.454964] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 496.454973] process_one_work+0x7c0/0x14c0 [ 496.454983] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 496.454988] ? worker_thread+0x163/0x1080 [ 496.454998] worker_thread+0x5d7/0x1080 [ 496.455010] ? process_one_work+0x14c0/0x14c0 [ 496.455019] kthread+0x30d/0x420 [ 496.455026] ? kthread_create_on_node+0xd0/0xd0 [ 496.455033] ret_from_fork+0x24/0x30 [ 496.455042] Code: 0c a6 bc 07 83 c2 03 48 89 2d 42 a6 bc 07 48 89 2d bb a5 bc 07 38 ca 7c 08 84 c9 0f 85 9a 13 00 00 41 8b 9c 24 3c 03 00 00 31 d2 f3 83 f8 05 89 44 24 10 0f 8e b8 0a 00 00 e8 31 52 40 fe 8b [ 496.455181] RIP: fbcon_switch+0x1cb/0x1700 RSP: ffff888038c5fa88 [ 496.455189] ---[ end trace fd1f75721513a064 ]--- [ 496.455194] Kernel panic - not syncing: Fatal exception [ 496.456702] Kernel Offset: disabled